Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: +jPLoIs/zSmE5NhTBQYjESZoty5/adCAJayq1owSSLo=
Subject key identifier: EB:D1:7D:09:26:45:C7:4A:E1:DE:4F:3C:8C:4D:8F:16:C4:7A:32:62
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 0199221E36B05983D56F5AF1C01AC2B1DE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: A5xa5klJjMaeEN+uKZHBhfNacxoXuKtsGr5dGAI78kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:36:b0:59:83:d5:6f:5a:f1:c0:1a:c2:b1:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=ebd17d092645c74ae1de4f3c8c4d8f16c47a3262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:9d:ed:41:83:ac:9e:28:92:d9:1c:a9:4b:
19:fe:92:4a:48:a5:4c:bc:e4:42:a7:d3:36:f3:ac:
dc:8a:fd:c3:44:f4:c7:aa:1b:55:02:10:ad:b1:d1:
48:48:50:58:33:9b:fd:39:a5:02:36:c3:79:f6:eb:
5d:98:ae:a2:55:2c:42:5f:57:24:e9:33:fa:f9:89:
8f:06:83:38:ee:c1:0f:38:85:2a:16:2d:8a:cb:a4:
84:b6:60:b5:89:6c:00:06:db:67:11:26:53:e2:65:
e3:b1:48:84:54:f8:37:7f:61:99:63:15:23:11:95:
8c:6c:81:ae:76:6d:a8:67:95:38:c7:ba:1b:d1:e0:
b6:94:d9:72:db:8a:28:3d:ed:f8:46:0b:57:77:71:
63:cc:f5:74:33:cc:1b:65:b0:95:f3:04:f6:a2:06:
d0:e8:48:ac:e7:17:c0:39:75:00:0f:56:ce:f3:87:
12:35:a4:4d:c9:ef:4d:4a:9f:49:9b:a7:37:db:6b:
d9:f5:77:b8:eb:76:57:3d:67:db:8a:36:05:4a:67:
d8:1b:4b:2b:47:0c:8e:6b:3e:76:74:ac:93:96:5e:
a5:70:38:58:9f:6f:99:13:b5:e4:87:ef:be:3e:57:
a2:3d:74:32:7c:d5:fb:a7:f2:2e:e1:f6:26:30:4a:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:7D:09:26:45:C7:4A:E1:DE:4F:3C:8C:4D:8F:16:C4:7A:32:62
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:2d:97:30:47:40:a8:7d:52:8b:0e:af:39:cb:72:29:b4:
2c:66:97:67:9a:76:ce:d8:e0:2e:aa:f4:3e:8e:d4:2d:e8:88:
85:9b:f3:e0:68:6d:09:80:9e:1a:1b:a6:32:8a:40:5d:ea:ff:
69:8f:f1:fe:ea:0e:e1:bb:09:b5:29:ae:c9:9a:1f:b8:03:9d:
1c:9b:0e:e5:ed:28:1b:02:d7:fb:c9:c3:e9:27:73:b9:2f:16:
82:da:cd:93:77:a7:60:10:e7:80:b4:28:64:c6:2e:f6:a7:2f:
d0:c5:80:c1:e5:17:ba:17:83:2b:b0:3d:96:9b:d0:ef:30:88:
48:f6:6d:0b:a0:fa:a5:32:9a:82:38:d6:79:17:69:e3:60:54:
31:a8:21:c4:45:ee:ed:45:39:24:ab:c5:74:78:72:3b:40:3e:
f9:98:a8:f9:5c:02:37:91:11:92:b8:1e:80:8a:ce:5c:c9:ac:
e2:9c:20:f3:e4:be:a7:40:ae:2b:96:98:f8:72:8b:7e:9e:ce:
20:06:73:d2:0d:ca:83:84:d2:cc:ca:5e:29:c7:1a:ea:8e:08:
f0:ce:7d:50:f7:1a:17:67:a1:a8:4f:18:37:eb:b2:f4:92:3e:
52:e5:92:37:1a:e3:f6:e5:07:3d:06:8c:4c:54:48:ca:c6:7c:
19:f0:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:12 2025 by rpki-client