Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: XxZi44A3Y2Kl8q5LYggYrOaO0BOxEgZzy8iXKAm/5Co=
Subject key identifier: 2D:30:AB:05:FA:3B:44:69:C3:A6:17:1E:E7:14:21:96:C0:8A:CD:10
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 0199350097170B1E51E9F0936EEFE021394D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 03CF
Signing time: Wed 10 Sep 2025 19:00:54 +0000
Manifest this update: Wed 10 Sep 2025 19:00:54 +0000
Manifest next update: Thu 11 Sep 2025 19:00:54 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: nStraQ1bP2UQvq1qNmZ6X2cRjB6+cG28H5PKL9u0BUA=)
2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:97:17:0b:1e:51:e9:f0:93:6e:ef:e0:21:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Sep 10 19:00:54 2025 GMT
Not After : Sep 11 19:00:54 2025 GMT
Subject: CN=2d30ab05fa3b4469c3a6171ee7142196c08acd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:15:c2:e7:57:35:6e:72:f2:14:8f:f1:08:
d1:c5:49:8b:f2:ae:80:43:69:fe:13:f1:25:35:6d:
45:fe:ff:ca:75:e3:10:df:82:ae:cc:81:40:58:6f:
a4:df:64:5a:84:d6:37:72:b5:4b:e8:75:e9:04:6a:
e5:0e:93:80:dc:f1:72:d0:e6:1c:f8:3c:74:a1:db:
a5:2c:29:11:85:73:97:b3:7c:e7:0e:cb:66:85:40:
ec:2e:9a:70:65:04:6f:4f:e9:25:05:0e:8f:7b:60:
9c:71:25:08:2b:26:92:1d:d8:e2:2d:e4:8d:05:03:
29:17:ff:94:8e:94:7b:34:f5:19:5c:b3:6f:ac:90:
c6:67:af:10:d1:61:46:ff:f5:f5:ad:46:76:0d:08:
94:62:5a:86:ed:2e:f9:0d:5c:61:06:e0:cb:a0:db:
ce:c7:ba:60:3f:f1:22:60:80:92:39:45:9f:67:1d:
c2:b4:f2:97:0c:8a:35:6d:1e:43:1c:e9:ac:93:1a:
26:eb:0f:3e:cb:b6:35:1f:29:60:22:6a:84:57:dd:
61:53:3f:75:85:ce:52:74:c5:66:71:9f:df:6d:67:
01:b0:f5:ee:f8:6d:1d:da:ed:28:40:89:66:26:36:
3c:8a:eb:2e:ee:ce:05:99:c5:6f:3b:f5:f3:3d:05:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:AB:05:FA:3B:44:69:C3:A6:17:1E:E7:14:21:96:C0:8A:CD:10
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:61:65:4d:3f:c4:52:3b:da:15:b3:29:1d:30:9c:68:f5:
68:bd:02:d6:cf:d5:85:f7:2c:80:47:8f:2b:26:e0:47:4a:c6:
ea:1f:d1:7d:9b:5a:e6:ea:24:08:f7:61:f4:ac:24:b6:48:29:
3a:4b:ee:67:a7:6f:3c:a3:42:64:83:67:d9:e1:dd:a3:4a:eb:
4e:7e:c8:2c:40:82:58:ca:98:f4:b7:db:bb:71:64:bc:73:ca:
bb:40:7d:7f:23:88:c8:67:2d:3d:7a:dd:c6:a5:19:f9:e2:85:
7f:5e:51:f2:b9:a8:94:36:67:31:60:d9:01:f6:8e:c0:97:b2:
05:77:bc:2b:10:7e:ca:4f:45:16:be:dc:19:93:6a:8a:ba:0d:
97:9e:24:d6:08:ae:21:0a:7f:d7:54:b6:fa:14:7a:00:be:8e:
a6:0a:e6:c9:dd:3c:23:54:35:1e:c8:32:13:b3:9c:f9:90:1d:
6f:3c:81:5b:21:4c:3d:8b:ca:7a:a6:88:7b:43:95:82:08:ec:
1b:78:d5:a8:c3:70:1d:d5:63:40:4a:5e:2d:d1:b0:ef:06:df:
74:c1:32:23:e0:62:f4:28:d3:82:e6:df:81:8e:aa:de:fb:b0:
88:ae:f9:d6:94:53:88:f7:91:81:c8:c3:d3:29:c0:25:5f:de:
f9:27:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:52:58 2025 by rpki-client