Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: jcZx54GDDRVicCs0HOb3g+vL8CjyifvwoaGc8oSL+Ig=
Subject key identifier: 86:E0:04:4A:3E:D9:44:91:4F:10:76:FF:DB:25:0C:3A:5E:50:DC:0F
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 0198C949E824B03CD1E90B22161F1709D000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 047B
Signing time: Wed 20 Aug 2025 21:02:00 +0000
Manifest this update: Wed 20 Aug 2025 21:02:00 +0000
Manifest next update: Thu 21 Aug 2025 21:02:00 +0000
Files and hashes: 1: TP9gFKgxBg6Q0nRcWGidlz7qFCE.roa (hash: jhQI7t+AgP6hvPj91hzIOl0xoOYJULkePtGE660/ydE=)
2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: S1ECTTAAU/6MegVGQwUzUMx8QbVCKzveL5j2L4XMrVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:e8:24:b0:3c:d1:e9:0b:22:16:1f:17:09:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Aug 20 21:02:00 2025 GMT
Not After : Aug 21 21:02:00 2025 GMT
Subject: CN=86e0044a3ed944914f1076ffdb250c3a5e50dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:a1:1c:b9:88:6b:ef:a0:1a:a7:fc:55:e8:
b5:0b:20:4e:21:a3:d4:9c:cb:52:e9:0c:76:e9:65:
3e:d7:ef:18:24:b3:98:a4:1d:f4:4f:42:72:c9:f4:
9a:3e:2b:5c:dd:a5:93:3a:38:e0:db:87:7b:63:38:
58:5a:32:9a:95:0c:3a:ed:79:b7:8b:e2:4e:22:0b:
cf:f9:d9:9d:e0:db:70:48:7f:4e:fa:19:ad:72:91:
82:68:b3:c0:bd:92:3e:83:4c:33:85:37:0f:f3:9c:
17:ca:42:ea:e2:ca:c4:66:3e:1e:d2:0a:15:45:ec:
f1:85:65:b6:7b:dd:8b:88:a8:a5:7b:e8:07:41:f5:
8e:ba:65:ee:87:5c:4e:7c:46:2d:12:7e:d2:a8:9d:
c9:83:92:e7:15:0d:22:98:dc:68:f3:0c:fd:72:f6:
9f:0e:cc:d5:d8:63:8a:17:0c:7d:56:16:21:37:22:
c0:a7:33:61:ee:c5:86:04:f2:74:37:ce:4e:fb:ce:
f0:48:89:c8:f2:e7:19:a0:6a:11:86:b9:d9:5e:ec:
41:24:3f:4e:8b:e5:cd:5f:b2:b9:a8:d3:b7:39:fb:
8f:e4:33:1a:0d:52:31:6f:c1:8d:bb:26:89:0a:ea:
d2:68:0a:5a:cd:76:2a:f4:50:21:c2:70:af:d6:4c:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:04:4A:3E:D9:44:91:4F:10:76:FF:DB:25:0C:3A:5E:50:DC:0F
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:70:90:6d:7e:b7:d9:94:89:e6:ec:28:e3:6f:55:7c:53:69:
8d:73:88:59:17:24:48:c1:97:7c:7c:59:21:36:67:9c:98:7f:
1f:1d:40:f3:3d:81:39:a1:57:95:f2:2a:19:0f:b1:8f:c2:f3:
84:c6:74:7f:7b:17:f2:22:68:de:08:24:50:ab:b2:a0:2b:d8:
53:c2:27:15:a0:29:e1:ab:09:f5:e4:f1:d1:5f:59:6f:07:97:
cc:5c:77:3d:fe:02:0f:3f:30:7c:b3:d4:8e:b9:9c:e8:67:be:
75:0e:49:82:e6:7f:ef:4a:9a:6b:f4:5f:e9:40:14:7a:33:ba:
57:f9:69:ea:2b:61:4a:01:aa:95:5d:64:72:d8:f9:b4:14:33:
a9:19:32:d6:85:71:4d:ad:a5:78:7c:d1:1d:27:0a:e4:8b:48:
11:0f:0e:4c:8d:6a:48:3c:82:03:d0:62:1e:19:87:02:f5:4b:
00:61:87:fd:5c:84:da:b4:3a:9f:9d:2c:c6:ef:8c:7d:06:7d:
8c:8f:e1:c3:00:57:3a:43:c8:9d:80:ab:24:88:26:c6:16:2e:
8e:6b:f6:7f:5f:4c:ae:0d:c6:e8:b7:f3:00:91:8a:75:ad:dc:
b7:89:30:cd:e1:6c:5b:da:88:6a:f7:eb:fc:80:85:1d:ba:3c:
a5:fc:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:15:35 2025 by rpki-client