Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: 784utS2Arw/CGR64tx+sXQ4XoTyAxxdU5nju+VltoHk=
Subject key identifier: 92:64:98:26:86:95:1B:F9:6D:C5:D7:E9:B7:6F:46:92:84:E3:AB:BB
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019921B23AE0E8ECAF445E8CA6D0EBD03236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 0732
Signing time: Sun 07 Sep 2025 01:02:32 +0000
Manifest this update: Sun 07 Sep 2025 01:02:32 +0000
Manifest next update: Mon 08 Sep 2025 01:02:32 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: B/aiFosKJTQXxihgki3JxHTKFXpIWuYCbPJgzXFXCsQ=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:3a:e0:e8:ec:af:44:5e:8c:a6:d0:eb:d0:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Sep 7 01:02:32 2025 GMT
Not After : Sep 8 01:02:32 2025 GMT
Subject: CN=9264982686951bf96dc5d7e9b76f469284e3abbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:39:7b:a0:8e:4e:7f:ea:db:a3:a5:ee:8a:
94:64:88:49:a1:09:18:8e:cc:9d:d4:a8:a2:17:f8:
f0:08:e0:2c:24:be:13:06:5c:a6:55:15:96:10:d6:
9c:cf:20:15:06:f4:f4:c6:4a:e6:13:a0:6e:27:4a:
00:9c:f2:07:b4:8b:44:72:76:6f:69:d3:b7:a7:a5:
1b:c0:29:db:c1:4b:8e:cc:0d:09:74:26:07:a1:c1:
1b:78:0a:20:c6:28:61:03:46:80:56:6c:b8:7a:00:
8c:f9:71:c3:2e:00:bb:41:32:e8:cf:61:32:42:e2:
c1:85:29:23:0e:5d:4e:3f:75:ef:32:ea:04:81:c4:
93:f3:dc:1a:5d:b8:9f:3f:f7:dc:b0:8b:f0:2d:f4:
9c:5d:97:0c:77:c4:62:0c:fd:d3:7f:cd:10:3f:8d:
58:5d:64:e3:ff:3a:06:30:17:9d:55:86:40:e7:2e:
38:44:60:e6:89:9e:a7:36:4c:00:18:23:36:20:36:
d6:23:03:77:ae:a8:ab:39:d6:64:c5:6b:c0:dc:f7:
a4:93:4c:15:55:ff:03:8f:08:80:ff:87:e5:b6:61:
ae:d5:10:54:6e:0a:12:e5:8a:d1:e2:b6:32:1e:97:
24:84:cd:27:c1:33:24:84:4a:2c:d0:ca:62:90:91:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:64:98:26:86:95:1B:F9:6D:C5:D7:E9:B7:6F:46:92:84:E3:AB:BB
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:61:7a:1f:d6:75:45:fe:04:f9:e5:c9:04:e1:4a:e2:e8:85:
21:4e:c2:0d:de:25:2e:db:a5:0d:eb:0f:c1:ae:22:dc:bc:21:
59:49:84:7b:bf:9c:d2:2f:64:bd:8b:0d:3c:81:d2:ef:ba:42:
2f:11:36:df:12:34:e0:86:e6:c0:6c:04:1c:69:29:f3:fa:b8:
6d:ea:f7:a5:9f:c8:44:1e:a8:fb:a8:d3:4c:5a:41:31:22:88:
ba:1c:5b:c2:b5:03:90:0f:13:94:ad:c9:8e:f5:62:61:11:44:
57:99:00:b4:2b:74:8a:1f:50:11:86:96:d6:c9:7c:79:de:9b:
d3:b5:14:da:fb:c0:77:42:f9:f0:d8:64:a3:0d:f8:77:52:32:
2a:cb:90:32:41:57:e7:7e:df:7f:cb:01:09:88:e7:89:a2:1c:
fa:37:db:75:2e:b8:4b:34:67:cd:2d:d7:2b:ae:93:9d:86:2d:
72:35:75:8a:71:75:17:1a:72:49:07:c2:6a:e9:5f:0e:15:4b:
2e:7c:d7:ea:d2:72:b5:54:25:da:5b:50:7e:85:2d:dc:b4:ad:
60:96:c2:f8:5c:e3:98:70:78:82:f4:36:b2:e0:14:35:2a:04:
ea:d6:8e:e8:ec:fe:8b:30:59:89:51:2f:e2:17:07:60:11:fc:
31:57:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:30 2025 by rpki-client