Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: Faf/EJ1GWpE80GIb8JdbE2KaG9fDNMFHgYH+Oey31Cs=
Subject key identifier: 0F:F9:6D:CF:65:90:75:F0:97:B3:84:1E:3B:F4:87:04:DD:96:11:58
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0197CA275F9FD3DAC94FD7AC9555CE0ADF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0B0E
Signing time: Wed 02 Jul 2025 08:01:07 +0000
Manifest this update: Wed 02 Jul 2025 08:01:07 +0000
Manifest next update: Thu 03 Jul 2025 08:01:07 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: wIKxogd554C/6BKgujZO9KVPKoqxtoQYQ/mCeGXps4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:5f:9f:d3:da:c9:4f:d7:ac:95:55:ce:0a:df:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Jul 2 08:01:07 2025 GMT
Not After : Jul 3 08:01:07 2025 GMT
Subject: CN=0ff96dcf659075f097b3841e3bf48704dd961158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:54:40:3b:10:16:68:03:21:1a:2e:fc:8c:
1f:3d:a8:ae:14:ef:14:5f:62:59:19:a0:36:66:34:
52:e7:76:f0:39:67:ac:43:f4:a2:22:6c:82:6c:a7:
9c:11:5c:5e:05:09:71:f1:5f:73:b1:e1:1c:f2:71:
76:ad:67:09:7e:e2:6f:63:c7:d8:7c:f3:cf:cc:f1:
0f:4e:83:19:cf:12:f3:0b:81:f5:3a:e1:39:42:f0:
6b:0a:89:17:43:7e:8c:fd:9a:5d:8f:5c:ea:df:e5:
9e:fe:d8:a0:3b:f0:76:ca:9d:f4:34:d1:b0:be:25:
e2:91:2e:ec:10:c9:9c:02:6b:a9:24:d8:c3:ee:13:
45:31:69:76:8a:28:33:21:62:00:0e:cb:d6:bf:f4:
66:e7:a0:84:7c:be:da:35:26:94:e1:75:5b:68:ce:
28:46:4c:92:07:05:08:68:3a:b3:d3:20:0f:96:f9:
2a:a5:19:26:26:cd:5d:f1:43:34:e4:77:31:89:b7:
9d:a3:41:03:5d:96:9f:0d:11:a7:22:32:fe:e2:c5:
a1:a5:f5:cf:9a:22:bc:1f:c3:c1:ff:06:55:c1:47:
cb:cf:e2:6c:5f:ae:12:1a:1d:7f:7d:55:c5:d3:30:
ab:6d:57:33:0c:59:7f:9c:ae:5c:20:37:94:f5:57:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:6D:CF:65:90:75:F0:97:B3:84:1E:3B:F4:87:04:DD:96:11:58
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:52:15:03:82:4d:89:7c:26:e8:0c:da:c8:db:71:e7:0e:d1:
c5:43:74:56:6d:1d:c7:d4:18:10:f4:9b:c1:dd:0c:1a:0d:af:
99:6c:33:ae:29:b2:4d:dd:9c:0d:e2:e6:fb:8d:ba:a2:30:08:
8e:9e:5a:dc:83:0b:5c:a1:5e:8e:0d:48:30:b1:88:56:b4:a7:
6d:2f:b6:a5:be:4b:e5:6f:ff:d1:0b:0b:41:b8:b7:15:8a:a0:
aa:71:9a:9d:c0:a3:fb:22:f0:f6:2a:75:3c:66:5c:b2:22:1e:
ce:82:f2:ef:4b:85:f8:57:2e:87:67:6d:da:d8:ad:b5:ff:77:
fe:71:ee:b6:bd:f4:d6:5e:70:b8:df:3f:61:3d:38:e0:35:42:
b4:9c:8d:99:aa:c4:4f:08:1c:58:65:d7:4f:bf:e2:16:19:fe:
88:ad:8f:6e:10:53:0d:61:4b:fa:64:d3:58:15:2d:5f:4b:82:
c3:bd:42:bf:f9:4b:04:cb:d8:28:f8:bf:b0:9c:9a:24:f1:93:
04:8c:a3:92:ec:e8:70:44:66:09:3e:f3:67:30:07:8e:33:ec:
77:62:9b:7b:45:54:94:08:ab:08:aa:90:ac:72:c9:4f:d1:6a:
7a:d9:72:a4:7b:50:0c:52:86:b6:93:29:9c:39:f7:99:da:1b:
41:4a:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:44:09 2025 by rpki-client