Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: RnbJ71pmVfPbUwG0acXK4vEBeG01lm+ebGQldW2yPao=
Subject key identifier: 24:B1:8B:29:41:33:2F:E0:D0:B1:64:F5:3F:00:4D:66:EE:F9:2F:F1
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 0198CB36D75FFD3851E668569FAE213FAA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 1648
Signing time: Thu 21 Aug 2025 06:00:25 +0000
Manifest this update: Thu 21 Aug 2025 06:00:25 +0000
Manifest next update: Fri 22 Aug 2025 06:00:25 +0000
Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: 6bGYxICk4HM1/Ps8JH494gwhANmFnfyAUxXUjpuA4Hw=)
2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:36:d7:5f:fd:38:51:e6:68:56:9f:ae:21:3f:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Aug 21 06:00:25 2025 GMT
Not After : Aug 22 06:00:25 2025 GMT
Subject: CN=24b18b2941332fe0d0b164f53f004d66eef92ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:58:16:70:7d:df:58:dc:e9:bc:c2:8c:bc:
60:ed:81:5d:3f:60:f0:14:d2:e4:a0:5d:04:06:7c:
ed:7c:0e:14:f7:f1:d7:98:4b:a3:30:86:7b:36:52:
f6:e0:0e:43:5a:f2:b9:18:e0:4e:8b:24:ac:1f:79:
be:ec:ab:ed:84:be:9a:02:96:2e:a6:28:80:90:82:
59:d5:8e:ad:7b:bb:bc:a1:5f:40:7d:2b:df:49:31:
04:bf:01:63:7c:32:69:a8:ee:e0:ac:25:e3:41:06:
16:65:95:7f:71:9d:4d:aa:08:a9:76:dd:3a:37:46:
31:85:61:46:be:d4:89:ec:d5:78:e1:69:fe:32:61:
1a:6a:6f:19:e7:fe:71:63:dc:7f:1a:c8:18:f9:1f:
2d:db:5b:08:ec:d1:b3:9b:ca:5b:06:58:63:19:23:
26:39:b2:bc:27:e0:ce:04:e7:20:fd:df:77:d3:8d:
d2:c0:4f:8a:74:0b:be:08:ab:8b:e9:23:b3:90:24:
7e:9c:f7:bd:49:78:fb:d1:44:5a:68:be:f2:4c:6f:
42:ad:72:4d:31:bc:9b:59:9d:9e:40:0c:b9:f1:51:
ef:81:d0:26:85:94:77:60:dc:72:79:71:1d:e0:af:
ca:19:db:92:84:69:90:fa:c6:c9:e0:20:5a:df:aa:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:8B:29:41:33:2F:E0:D0:B1:64:F5:3F:00:4D:66:EE:F9:2F:F1
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1c:1a:10:ef:84:6a:bd:e1:9c:f5:45:2c:fc:06:c2:8b:2b:
fc:14:6e:df:28:72:d0:a0:01:41:37:53:19:99:ea:00:5c:bc:
47:98:da:0e:ce:89:d8:24:3a:9f:36:64:b1:53:d6:05:92:54:
75:66:e9:39:31:4e:21:e4:c7:84:bb:76:3c:cc:a9:4e:3c:89:
88:5a:95:e2:6d:f1:6c:e8:73:56:32:c0:83:bd:27:39:7c:86:
a4:2c:9c:9a:5f:aa:c5:c3:9e:e7:92:78:45:45:86:18:33:6c:
bd:c5:1a:a1:b6:7f:4b:be:cb:e8:1f:17:7f:83:7b:fa:90:57:
73:74:38:ed:e5:4d:76:88:e9:17:e5:a8:c7:c1:8a:a5:e1:86:
65:7f:80:70:85:5d:02:b5:c4:07:55:2e:49:2a:2b:b8:a3:4b:
f2:69:dc:5b:c2:3b:58:54:4f:20:87:1c:1e:ba:25:96:ff:f6:
b1:c2:5a:27:0b:7e:22:ad:91:1f:fb:0a:78:02:03:80:ff:14:
3d:f8:b7:d1:f8:36:88:30:75:59:88:35:78:79:24:1e:a9:f4:
71:c2:3b:1f:08:d4:48:19:b0:3f:2c:65:f0:39:e5:b6:36:c6:
9d:da:5d:b4:26:bc:aa:fc:ee:d8:9a:d3:e5:53:c4:b0:ec:88:
97:74:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:46:16 2025 by rpki-client