Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: jxDXGgBBblEqg4TFFTBjZA/oHmwKuHA3PRifn84WVSM=
Subject key identifier: E5:70:A6:A7:1E:4F:85:56:B5:EC:ED:7A:53:04:CF:F2:6B:E6:F0:32
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 01992DEBDC67E33F76E271248F68EE89189A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0C6B
Signing time: Tue 09 Sep 2025 10:00:55 +0000
Manifest this update: Tue 09 Sep 2025 10:00:55 +0000
Manifest next update: Wed 10 Sep 2025 10:00:55 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: JXORx7biM1LOgrEMeIq8IBSyvkR5saOU0u9CVeMr4WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:dc:67:e3:3f:76:e2:71:24:8f:68:ee:89:18:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Sep 9 10:00:55 2025 GMT
Not After : Sep 10 10:00:55 2025 GMT
Subject: CN=e570a6a71e4f8556b5eced7a5304cff26be6f032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:c5:81:68:0b:dd:79:1f:32:f2:ce:a9:04:
3b:8b:cb:d6:4d:36:b0:ce:2a:0e:b0:9b:b1:02:1a:
a8:90:32:b1:6a:51:0d:c8:30:04:c1:9e:71:c0:05:
86:0e:e1:35:51:f0:91:53:dc:09:1d:cb:0d:aa:f4:
b8:41:24:02:57:a6:02:62:5d:43:41:0a:1e:77:c9:
81:c8:05:d5:e3:13:f9:3f:9a:7f:e1:58:19:8c:ce:
f3:63:ab:6c:1b:a9:ce:f7:f3:b9:de:ca:1e:3d:fd:
7f:f1:84:57:a3:3f:c1:c9:c9:43:6f:e0:c0:5d:fd:
52:bb:1c:60:d5:b7:cb:4b:4f:60:6f:f4:ac:67:69:
9e:93:25:1f:96:9b:ea:92:85:c2:dc:6a:1f:06:20:
20:5f:22:ef:bd:73:a8:b9:d5:81:fc:aa:cf:7b:28:
26:a5:b7:18:cc:34:8e:4b:22:0e:0d:ee:7e:aa:90:
a9:7f:ee:bc:3f:32:82:9c:09:ed:51:f3:f7:5f:ea:
91:3b:e1:25:ca:30:56:f8:da:35:25:62:36:15:a9:
62:7c:20:d2:fe:b1:f5:ba:cf:42:3e:3d:41:4f:b8:
59:66:fe:87:a1:0e:ef:71:83:19:ad:3e:b9:fa:a5:
91:ff:73:56:9e:8f:bf:66:04:76:ba:b3:42:bc:83:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:A6:A7:1E:4F:85:56:B5:EC:ED:7A:53:04:CF:F2:6B:E6:F0:32
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:5d:fc:8f:91:a8:b7:e0:52:bf:55:a7:da:10:22:fd:dd:
7f:8e:ca:f3:b4:d4:8a:19:27:bf:2b:5b:45:ca:2d:84:1c:b7:
7b:72:9d:b3:0a:ab:de:04:fc:52:92:5b:08:5b:15:5b:79:83:
07:e6:25:5d:4a:73:95:b8:c6:0c:d6:5d:83:d5:72:1f:c2:fe:
64:97:bd:fb:a5:46:dd:10:2d:8a:39:bd:68:42:ae:d7:6d:05:
42:1c:6c:81:ea:f7:1c:66:1c:99:27:26:2d:0b:1c:62:50:7e:
56:8c:2f:b6:ca:8d:6b:77:cb:e0:4e:8f:8b:ce:1b:77:b5:25:
89:d7:a9:53:fc:49:9a:38:02:99:4a:9d:10:f7:bf:23:e6:b3:
14:67:a5:87:fc:9b:e3:5b:b8:45:15:5c:30:42:f5:d9:e2:98:
86:e7:78:ff:c3:ad:c6:60:37:86:0b:38:c7:e3:70:38:52:d1:
73:19:76:dd:07:51:66:9d:25:fe:fa:cf:da:8f:2a:3b:f5:4b:
53:f7:01:60:9c:02:a8:d1:0b:42:b8:b9:a9:6c:fb:16:a6:68:
ed:e9:f7:f8:1e:d5:05:5f:e9:69:2e:f2:22:6a:87:8b:e2:9c:
97:7c:b4:17:b1:cf:51:20:5f:90:63:06:d4:75:bb:03:b7:ca:
ea:24:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:06 2025 by rpki-client