Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: F0CV3T9wjdANs7DjS7wOx4mtFSZG3iPE4h5K9bXCvoM=
Subject key identifier: 54:1A:1F:11:EB:B8:F0:8C:8B:74:5C:7F:24:DD:A1:ED:A4:6E:C8:B7
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 019922C2ECA989D80291F8F14BC83A218EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 06:00:23 +0000
Manifest this update: Sun 07 Sep 2025 06:00:23 +0000
Manifest next update: Mon 08 Sep 2025 06:00:23 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: QyJmXUbAWXpiGxzd9A9lPcr0NN+Q+Wr7gcQkgScSU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:ec:a9:89:d8:02:91:f8:f1:4b:c8:3a:21:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Sep 7 06:00:23 2025 GMT
Not After : Sep 8 06:00:23 2025 GMT
Subject: CN=541a1f11ebb8f08c8b745c7f24dda1eda46ec8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:a2:51:24:76:b8:dc:b3:5c:27:b7:90:53:
65:52:b3:af:57:0f:90:5c:ab:bb:ab:b8:1f:95:cd:
17:e0:e5:93:61:88:fa:42:b9:cc:53:c3:38:f5:49:
d5:15:e3:08:f1:6b:a3:41:1a:4f:59:a4:c4:f5:bf:
7e:db:d6:0a:d9:3b:7d:ad:e7:82:23:a7:75:62:2c:
b0:67:2f:f9:08:d2:eb:ee:42:3f:14:cf:3e:1e:6d:
35:5b:b9:3e:25:fc:08:5b:f1:b9:80:8e:6f:7b:e9:
29:3c:48:27:b3:f0:2e:66:7b:ab:08:0c:bb:8f:70:
47:8c:5e:f1:a9:7b:aa:4d:10:a8:1a:d1:45:64:e8:
a3:a0:e3:d1:9b:57:9b:29:b6:cf:87:83:ec:a4:7f:
16:29:6a:6b:55:de:47:05:86:b1:dd:db:f2:6c:b5:
65:52:d4:74:0f:91:6e:44:ba:bb:03:54:42:02:c5:
11:fa:9f:11:1c:df:cc:77:bc:cb:2e:24:b6:e4:35:
e1:22:91:40:2d:38:78:a4:48:24:7f:61:08:72:1a:
8d:ea:e0:ec:7f:4f:13:a9:a9:79:df:58:77:3e:1e:
25:ff:48:0d:4c:9b:7e:1c:0b:dd:1e:0a:6f:10:2a:
0b:e3:20:77:8e:50:f6:c2:13:90:30:41:e3:ee:bd:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:1F:11:EB:B8:F0:8C:8B:74:5C:7F:24:DD:A1:ED:A4:6E:C8:B7
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:71:5e:38:f6:5c:b5:8b:ef:ab:64:52:42:09:a9:cb:13:
03:fe:86:a6:6c:18:b3:48:c8:61:80:b2:57:ad:10:87:79:32:
1f:72:50:a8:d3:f9:0f:0d:5a:f8:d5:00:d5:65:dc:ee:9e:f8:
cb:f6:8d:a7:3b:52:8b:10:a0:f4:9d:74:ba:ea:b7:44:62:d1:
d9:71:a0:89:79:4c:41:57:4f:0b:77:28:37:1c:6c:68:84:26:
6c:39:fc:04:fe:56:07:bf:15:2a:fe:b6:96:2b:cc:f5:5d:a6:
e1:13:43:d5:76:95:8f:02:4b:72:ce:de:ec:74:1d:da:03:43:
9b:f7:60:1a:bb:67:7b:cb:de:c3:fc:e6:e1:01:50:1e:95:12:
28:83:ca:db:66:8b:c1:14:02:c0:4d:6f:bd:8b:b3:cf:63:ab:
1e:61:61:cf:a5:34:e0:83:d4:54:9a:1c:d2:d8:c0:85:4c:05:
b8:cb:37:52:fb:33:4c:4e:d1:72:ff:91:ba:be:1c:69:37:f1:
93:f0:2c:1f:47:74:16:6f:a2:3e:48:a0:62:e4:23:d2:7a:af:
bd:aa:a5:eb:25:c8:8b:b3:0e:a2:ee:0f:5c:d6:fc:00:de:5c:
b3:4f:1e:f9:cc:19:06:1e:ac:53:36:97:d3:84:30:d5:fd:70:
92:2e:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:39 2025 by rpki-client