Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: OoF2hE4E8X7ncNAFoJW1XtK5ud0LN/2piNtfzZcBFzI=
Subject key identifier: 83:5B:3B:ED:A4:A2:94:83:AA:AF:31:B0:96:D9:1B:36:6E:27:50:EF
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0199233146473F195341D1EAA8580872EFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 08FF
Signing time: Sun 07 Sep 2025 08:00:55 +0000
Manifest this update: Sun 07 Sep 2025 08:00:55 +0000
Manifest next update: Mon 08 Sep 2025 08:00:55 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: E1XrOeIFGJgfsHezSgcUd96rHipMXkiLXPmE+KUgwBI=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:46:47:3f:19:53:41:d1:ea:a8:58:08:72:ef:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Sep 7 08:00:55 2025 GMT
Not After : Sep 8 08:00:55 2025 GMT
Subject: CN=835b3beda4a29483aaaf31b096d91b366e2750ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:72:96:a4:0f:84:56:e1:b3:94:24:1a:e9:
cc:29:34:8a:aa:e3:6f:8b:28:24:e6:c0:4d:ee:b8:
55:d0:f8:d2:71:8a:a5:a7:66:0d:d8:1c:de:28:4c:
82:1a:b1:22:4b:57:3c:f4:1c:51:bc:81:b7:a0:1a:
b9:c3:26:fd:d3:62:d5:4f:af:09:ac:b5:76:05:99:
85:91:3d:4c:6d:08:67:0b:ba:e4:e0:c5:17:c2:87:
09:b9:8d:bd:62:8d:d6:9b:78:65:4c:6c:53:bd:4c:
32:8d:fd:c0:dc:27:c2:00:56:fc:f0:00:60:d5:8b:
3f:32:08:e1:1f:42:bd:b0:e6:e7:19:ba:78:55:89:
c6:58:ca:23:d4:3c:46:f2:ab:01:89:59:ce:4e:bd:
a7:3e:45:ac:01:8b:4b:7d:e1:0a:75:41:a8:87:76:
1b:b4:29:9c:57:a5:e7:e3:ef:2a:0d:55:8c:5b:ce:
8d:1d:99:39:1a:aa:ef:63:42:0a:89:d1:00:8a:0a:
61:92:b8:77:9b:a6:cb:26:99:66:3c:e2:e1:68:8b:
7c:a5:91:9a:1a:0f:45:c1:16:7b:d1:4f:6b:c5:1e:
f8:c1:8d:0d:d3:e7:ce:40:a8:17:c8:6f:81:dc:a8:
6b:da:79:08:ed:09:50:78:06:e7:00:22:d3:d6:67:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:3B:ED:A4:A2:94:83:AA:AF:31:B0:96:D9:1B:36:6E:27:50:EF
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:75:9c:c4:fb:2d:1b:01:00:77:bd:12:d2:a0:e7:3f:b0:
15:0d:2b:7c:72:23:50:41:6c:d4:14:12:d3:1f:a3:de:e6:28:
2f:c9:bf:80:3d:61:8f:5c:0a:32:63:fc:c4:a3:12:da:0a:76:
24:4b:e0:f6:f2:5c:84:bd:a4:93:e5:8b:94:02:85:e5:8f:0d:
d7:d0:c4:85:b2:c0:95:76:7e:75:ca:5f:dc:eb:6f:c8:6c:75:
31:41:74:5c:0e:51:f9:4f:87:93:c1:9b:4a:10:73:b6:08:24:
e2:8c:c3:16:de:bb:58:59:52:49:e4:d5:bb:11:8d:3b:99:1c:
9a:6a:7d:2d:83:05:39:3e:fc:c7:c1:d2:73:3a:05:49:2e:b8:
2a:ed:dd:ce:48:d5:10:5d:5d:9d:09:7e:35:ed:3d:29:e3:87:
86:13:20:11:1e:bf:ce:dc:1e:6c:ec:88:a7:bb:ab:0a:b6:f9:
9c:d9:88:5b:80:b9:e6:67:ac:13:7b:5d:ed:4b:1f:0f:39:e3:
f6:8b:c2:4b:c4:a9:cd:09:4c:c1:ff:c6:50:30:8e:4e:99:b3:
bd:47:62:d7:3a:7e:ee:79:70:c3:be:59:8a:7b:3f:f5:4d:ec:
aa:a2:55:73:5e:9b:da:a2:98:cb:62:87:12:de:bb:77:37:bc:
63:7b:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:01 2025 by rpki-client