
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: 6p738Xzn4cMxWHWpxkhTbfZtvgW7L0Cbzl9BLVEt5W4=
Subject key identifier: 2E:39:3C:39:37:42:B8:8B:2E:1C:A3:43:A8:AE:16:1B:0F:E5:59:5F
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 01992330F5183CEE14EA747CA9E9B30D69B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 04FD
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: jtQS1/k8il+AmH16iAcjV+BbGDsr4EUbaDSEcH3dWd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f5:18:3c:ee:14:ea:74:7c:a9:e9:b3:0d:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=2e393c393742b88b2e1ca343a8ae161b0fe5595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:bf:1e:5f:bf:e7:6f:d5:13:3d:66:bf:ee:
ff:8e:71:53:65:aa:3c:db:45:eb:30:6d:ea:98:0f:
fa:aa:57:5f:37:d4:0c:d7:62:1b:61:a5:a1:7f:42:
2e:00:9c:8d:69:e8:17:1d:2a:88:f9:2b:3a:00:97:
46:00:2f:75:f5:cc:75:70:a2:1d:1e:8e:24:e8:cf:
0b:35:c8:6e:0c:9b:a3:4e:37:30:e0:62:62:d1:50:
fc:66:9e:1c:ba:26:a0:6f:e4:e8:6d:99:06:43:fc:
fd:af:3c:8f:2f:da:d3:f2:c2:d9:30:59:96:68:25:
8a:e1:23:c6:26:31:29:1a:e1:3b:45:7b:d7:93:62:
2b:35:60:46:16:42:48:81:5c:9c:33:3e:6f:88:85:
25:40:bd:b7:61:02:d5:8c:c5:35:ed:02:43:29:92:
e0:42:bc:11:d9:f7:db:d5:7d:75:a0:dd:8d:40:b7:
44:bf:a0:78:42:73:93:43:94:5c:be:7d:96:15:b3:
26:20:a9:42:a3:d4:75:58:fc:ba:42:69:c2:0a:6f:
bd:1f:ce:9b:4a:45:19:4e:63:59:30:94:f9:6f:34:
a4:3b:25:0e:2b:e5:aa:39:c3:79:89:fa:18:cb:eb:
52:e7:5d:d9:11:46:01:c4:de:f3:6d:7d:a4:61:aa:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:3C:39:37:42:B8:8B:2E:1C:A3:43:A8:AE:16:1B:0F:E5:59:5F
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f8:a6:7f:f7:2d:8b:a6:2d:f9:c2:c6:f1:8e:3a:17:c4:75:
22:e6:f4:99:89:1c:ad:1b:d4:4e:1d:49:63:44:c5:92:36:b3:
9b:86:9e:8c:a2:c6:5b:ee:50:cb:0b:05:10:1f:22:a9:b3:82:
07:e1:c6:ef:1a:e3:c0:43:be:a2:c2:f9:5d:86:21:a7:c3:c8:
cd:00:0b:36:23:81:97:6b:d5:6d:25:bc:9a:57:b7:e8:ed:29:
c2:d9:23:a6:c6:39:9d:8a:b1:a9:74:ed:47:24:f7:42:7a:92:
06:7e:dd:63:e3:e7:d7:e6:fc:8d:fd:3e:d4:bc:5f:8f:bf:31:
50:66:cb:27:4c:17:a7:e0:f9:be:5a:97:3c:45:e9:d9:45:95:
d0:04:7a:98:c2:34:fc:3c:32:16:2f:8b:a6:eb:8f:22:d2:3c:
4c:da:f7:6c:5d:fd:1d:d4:7c:23:66:d4:96:41:35:25:db:56:
69:b9:e3:b8:25:26:a5:8e:68:28:70:25:9a:86:e5:6f:b4:09:
03:35:49:0c:06:8e:0c:2c:b5:26:e5:df:0b:34:46:c4:34:19:
74:20:22:ad:6a:e8:ab:3d:a1:f8:b0:e8:46:e7:5f:4a:43:03:
69:4b:96:3e:f1:00:6b:88:56:2d:eb:43:f7:ea:bc:e2:22:05:
0d:04:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:26 2025 by rpki-client