Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: fo2gQk+nGeVyF01urnqJ3Hk1Asb5MEN9UG9xM9Zkr1E=
Subject key identifier: AB:8A:93:EC:4F:48:6D:4A:40:FF:F0:53:F9:C4:7E:6A:72:9B:C0:7C
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 0199239F85925FF8AAA59DC104D944B7873D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 0679
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: aWfwBhdJeGMSA+xEvpF5QH7+Yh4tEoVBUI0teW4Mdeo=)
2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:85:92:5f:f8:aa:a5:9d:c1:04:d9:44:b7:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=ab8a93ec4f486d4a40fff053f9c47e6a729bc07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:88:b6:57:c2:c8:d5:50:09:2f:01:16:02:
31:d0:cc:19:d8:aa:f3:8d:53:5a:be:d2:bd:7f:14:
7b:ff:4a:e2:01:32:8d:d5:06:a1:f0:d5:d6:e8:14:
7e:c5:ba:d5:da:4a:ce:3d:57:14:d8:95:08:1f:9e:
b4:e8:1b:4c:ef:86:55:21:1d:5c:ee:79:5e:70:a4:
8e:b3:4c:fe:25:34:ac:35:c5:bd:71:1b:df:7b:8d:
7e:b4:dc:22:b8:aa:58:1e:f4:67:8e:0b:82:25:07:
83:ae:c6:08:1f:e2:b6:0f:d8:26:eb:81:08:ed:91:
8d:b0:9a:0f:a1:16:64:d0:18:2a:4b:d1:24:28:a2:
b0:22:4e:1e:4a:b3:a7:c0:e5:14:13:a7:fa:5b:18:
4d:de:fa:49:80:23:0f:78:d1:0b:34:8c:1a:b8:6b:
ba:25:78:9e:93:6e:d1:b5:3b:b3:9c:e3:85:e1:5e:
29:c5:5c:08:e2:51:4a:25:13:1f:29:7a:77:19:b7:
d5:cf:c6:fe:95:cc:c6:81:00:2b:c4:6f:94:40:fd:
6e:5a:90:5f:3b:72:e8:c5:a2:27:0d:97:b0:a6:10:
e9:4d:06:1e:af:ab:81:cb:12:94:01:e5:e2:70:d7:
7d:8b:c6:52:1f:16:0b:85:d5:a7:47:81:6e:6e:6a:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8A:93:EC:4F:48:6D:4A:40:FF:F0:53:F9:C4:7E:6A:72:9B:C0:7C
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:4d:a5:8f:46:66:07:fa:16:00:1c:56:1e:7e:74:f3:36:
3f:1b:ad:ae:3c:c6:ec:06:0c:22:72:24:0a:8d:40:7d:a2:59:
4e:91:7e:58:99:63:03:50:97:b1:63:6e:85:2d:73:f6:96:c4:
4b:fd:fc:55:e5:06:7f:0b:c3:c9:f4:cb:42:f9:41:3c:18:2e:
6d:1e:31:93:6f:32:6d:c1:35:eb:f2:e2:fa:2e:18:ee:77:5b:
35:26:fc:50:f3:84:8e:d3:a3:dd:c8:fa:c9:cb:11:74:54:0d:
a5:6b:5b:ec:d0:a6:df:b6:dc:16:3a:46:ee:90:88:e5:e1:f8:
dd:fc:bf:05:f6:99:56:3d:d2:8b:f2:9a:4b:a9:c5:08:bc:2c:
ac:8c:23:0d:e5:4d:52:14:78:43:28:0f:6c:db:db:24:06:d6:
78:b5:59:8e:0b:67:43:42:4b:77:56:2b:40:23:b1:25:b9:c2:
90:f8:21:d8:11:2b:d4:61:2c:d7:cf:ce:fc:ec:aa:71:96:ed:
23:11:3b:de:68:b5:19:1e:6c:1a:8c:dc:bd:f1:53:d1:02:0b:
0f:64:f6:c4:ba:18:f7:f8:30:b7:fb:96:b4:d6:30:eb:48:de:
d3:72:ed:5a:ce:4b:89:23:f2:87:13:bc:2c:05:79:f3:a9:43:
9a:f6:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client