Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: F22J4vYgWAu9sebITCmLfrqfq5L7z8mMXibWwumg2ao=
Subject key identifier: 13:80:AA:85:86:CB:41:7F:49:12:2D:48:FE:5F:C4:61:C0:FE:25:31
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 0199168843B2D2D7F7DF7D5B093965D9762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: A0
Signing time: Thu 04 Sep 2025 21:00:52 +0000
Manifest this update: Thu 04 Sep 2025 21:00:52 +0000
Manifest next update: Fri 05 Sep 2025 21:00:52 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: PiLnebT50wOY7sxKKEyeZI1xn7Fl2WkIGhP8XwRcyj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:43:b2:d2:d7:f7:df:7d:5b:09:39:65:d9:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Sep 4 21:00:52 2025 GMT
Not After : Sep 5 21:00:52 2025 GMT
Subject: CN=1380aa8586cb417f49122d48fe5fc461c0fe2531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:c0:a5:29:34:49:85:71:8d:9d:c8:11:9d:
9e:cb:28:df:a8:4f:58:de:3f:00:23:82:1f:6b:00:
e1:b2:49:2f:f0:8e:e0:1c:cd:e8:2c:de:43:54:3b:
5b:de:6f:75:d4:26:43:92:f9:5b:10:94:89:d0:c2:
0d:4f:7a:81:f8:6c:45:73:c5:09:52:cf:41:bf:2c:
b0:2d:f3:95:89:34:1b:38:05:c2:ed:b9:32:fd:44:
78:65:72:49:4e:63:49:1e:f6:e2:6e:d8:46:67:0b:
12:9f:9f:ba:63:75:52:58:48:68:0e:12:57:ea:af:
ae:dd:f8:52:21:d4:04:f9:d5:b9:36:33:60:29:97:
92:16:81:b1:99:83:dc:ec:eb:57:ff:2f:7d:e5:d8:
70:8b:83:b5:54:db:ba:d5:44:87:9a:48:1c:72:b0:
e5:80:7d:6a:74:95:db:7b:fd:c8:4a:21:d9:bc:5f:
cf:1c:a5:3a:14:97:8f:e7:d5:d0:15:89:ba:23:85:
d7:02:1e:d4:2f:2c:87:e2:9f:b5:80:e4:9a:88:28:
93:25:c0:e6:74:0e:80:6b:1f:c3:9a:1b:79:8d:d0:
22:ea:11:b2:26:28:f4:66:ff:46:bf:c0:2d:0b:cf:
9e:0c:5c:a3:40:00:02:6a:6e:7a:d0:a8:eb:ab:62:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:80:AA:85:86:CB:41:7F:49:12:2D:48:FE:5F:C4:61:C0:FE:25:31
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:38:39:7b:f2:b2:58:31:15:35:9d:22:8c:63:be:cc:1a:
e6:be:dd:11:ee:ed:39:a5:d8:26:fa:67:3b:42:27:66:3c:d9:
18:cc:cd:db:b9:4a:9b:b7:ca:fc:d5:3c:b6:30:15:76:2d:b6:
98:9a:59:97:34:31:fc:e3:8a:e1:45:dc:67:74:23:7e:08:4d:
a6:f7:97:dc:de:17:93:3b:49:ee:d5:4c:83:68:3c:c2:83:54:
02:9c:08:8a:03:70:d9:dd:18:2a:6e:65:cc:51:a6:58:6b:5a:
e0:7d:f6:9d:cc:16:a2:48:ce:75:16:32:bb:3c:0b:c3:c2:f2:
b7:a7:00:d3:67:c1:39:63:1e:4b:22:b8:31:90:f5:9c:4c:49:
08:6b:a8:c3:bd:89:81:14:c9:d1:d2:66:92:8b:3f:22:8e:72:
a0:0b:d9:f0:a6:c3:cd:ab:e5:16:93:02:c5:ef:65:ba:63:08:
e7:e4:bd:cb:b7:97:01:63:80:6d:a6:c4:2d:06:78:a9:8a:28:
4a:d9:b8:92:88:ca:bd:05:7a:19:7e:0d:39:ef:ab:78:32:fd:
74:b8:02:3c:4a:ce:53:59:44:0b:25:ca:10:bc:25:2a:f5:f2:
50:d7:48:88:4c:0d:1c:b7:17:1c:8a:cf:b7:66:1a:15:8b:8c:
bf:5a:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:17 2025 by rpki-client