Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: ijjWmFpIVcA8Cpl9Gu69NmUs6Cv8Mso8OQ297ru11vc=
Subject key identifier: 91:29:5A:64:8C:68:F5:80:DF:10:AC:A7:A1:B0:BD:71:68:33:64:39
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 01992CA240CFAFF84E432DAC9624913D0698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 0151
Signing time: Tue 09 Sep 2025 04:00:54 +0000
Manifest this update: Tue 09 Sep 2025 04:00:54 +0000
Manifest next update: Wed 10 Sep 2025 04:00:54 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: y+KMCyF/nZfMBRHjFgv+P1bhoYo44i+Gll2/kI5aHok=)
2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:40:cf:af:f8:4e:43:2d:ac:96:24:91:3d:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Sep 9 04:00:54 2025 GMT
Not After : Sep 10 04:00:54 2025 GMT
Subject: CN=91295a648c68f580df10aca7a1b0bd7168336439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:ba:8d:41:52:51:f3:31:7d:07:d8:58:28:
63:25:51:6c:3c:6a:82:96:3c:44:82:af:6e:98:97:
02:7d:de:fb:ed:cb:fe:b7:e8:36:57:0e:d2:42:7e:
18:d7:50:20:87:dd:89:4d:3c:71:ee:c0:55:5a:47:
6a:a7:6a:54:9b:14:79:c2:4e:fd:86:24:e0:32:f0:
f3:b3:89:55:2f:62:99:24:02:89:32:d0:b9:4f:29:
a9:cb:f3:c6:9d:1c:d5:ee:64:c8:f3:70:78:20:94:
bd:95:c6:d4:cc:74:d8:09:43:3c:41:8b:e4:db:d1:
a0:1e:89:02:e9:54:a8:8c:1a:a1:8b:a3:90:68:b1:
29:d0:36:e8:4b:60:ea:d5:f6:71:08:3d:a2:ad:0f:
97:20:ff:5c:fd:0a:0b:0e:ca:e4:57:3a:c1:5b:6e:
a1:73:a1:00:9d:fa:18:1a:b8:aa:6f:92:af:6d:bb:
05:94:98:8b:f5:d8:9e:e8:73:f1:b9:f7:26:db:13:
41:f7:bc:47:f7:4d:6b:ce:eb:ff:cf:1b:c2:92:bd:
1c:22:44:9a:d3:7c:9d:ac:62:46:14:db:d6:4d:64:
8d:d3:cf:07:55:cb:37:02:55:07:ec:58:21:be:d5:
b3:6b:29:cc:39:34:8c:eb:36:6e:ad:17:b2:de:31:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:5A:64:8C:68:F5:80:DF:10:AC:A7:A1:B0:BD:71:68:33:64:39
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:0d:9d:da:cd:dd:4b:2b:b0:f2:c5:38:f8:0c:b1:9d:9b:
bc:25:db:4d:1d:64:27:07:40:21:d8:f6:d0:b2:66:49:c6:17:
13:4f:b5:cc:20:af:0f:e6:95:c9:66:91:48:68:b3:17:d0:e7:
0d:f2:8a:42:2f:d3:b8:d2:36:7e:fe:2c:1b:85:0b:18:85:e5:
a0:3a:77:4a:ef:5e:1a:61:53:a5:3b:df:93:ea:d8:c8:d9:36:
23:44:99:95:e4:6b:84:4e:7c:8f:64:4b:b5:f6:28:c6:33:e2:
e5:71:cf:f8:f1:1b:02:13:73:07:f5:92:22:df:21:cc:37:ba:
23:4c:0a:bc:ac:0b:07:c0:99:20:d8:76:ab:78:dc:c7:dd:2f:
3f:5b:71:cf:0e:1e:3e:21:eb:a9:83:6b:89:6c:e6:79:d8:e7:
dd:60:36:51:78:ed:9b:9e:41:5c:d8:71:c5:1a:3b:93:2d:d3:
f4:f1:14:6b:95:ee:7b:32:0f:45:37:7b:93:9d:32:b0:49:43:
9e:9b:10:3c:89:cb:ec:0f:41:20:ee:c5:7c:ed:9a:d2:11:53:
fa:ae:59:9a:ad:f6:d0:88:6a:7b:9a:17:af:9e:c5:59:98:32:
49:99:0f:b2:72:7f:b1:a5:93:99:a3:66:17:2f:6b:b8:fc:f8:
ee:e4:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:25:52 2025 by rpki-client