Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: 1UySNNuwdWKqxytuH5GqTEFMAXucstWNIspEXqvjQdo=
Subject key identifier: 3D:04:C4:01:4C:FD:DB:11:F7:E2:10:4F:D6:78:63:14:74:13:94:19
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01992C349E9620B54FF8FE3E5DC48FED9510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0498
Signing time: Tue 09 Sep 2025 02:01:09 +0000
Manifest this update: Tue 09 Sep 2025 02:01:09 +0000
Manifest next update: Wed 10 Sep 2025 02:01:09 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: zQECCmnEYhFp6hKEYje+JpU+yl9r+snlIELiVvVt/Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:9e:96:20:b5:4f:f8:fe:3e:5d:c4:8f:ed:95:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Sep 9 02:01:09 2025 GMT
Not After : Sep 10 02:01:09 2025 GMT
Subject: CN=3d04c4014cfddb11f7e2104fd678631474139419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:a8:ed:f2:66:e9:f9:bf:47:01:44:d8:c4:
7c:1d:52:3e:2a:ed:f5:e4:9f:64:47:f2:40:3b:34:
80:59:9b:40:82:db:f5:bc:50:73:75:e5:ad:55:68:
72:cd:8e:22:eb:f3:95:df:a9:8d:f6:69:b7:a7:23:
ea:6e:e9:2a:72:a8:59:b2:78:ff:13:63:d8:00:40:
29:90:bc:e6:8f:d4:83:d4:54:56:37:8d:31:97:2c:
ee:cb:bf:5c:b7:bd:bd:c9:82:7a:be:79:7e:43:08:
a9:0b:a8:82:be:04:58:a8:29:59:1e:7c:11:eb:3b:
b9:80:9c:cb:6f:6e:1e:82:4c:ab:5f:c7:1b:24:ca:
7f:3f:e3:4a:07:e8:61:7a:e6:56:13:06:63:db:97:
95:01:36:2d:26:2e:56:d1:d1:be:ce:8a:8b:88:96:
44:42:f1:68:e9:3a:a3:89:c8:64:9c:8d:a6:c7:bc:
fe:8e:4c:14:4d:03:c2:07:dd:08:a7:d4:72:fd:21:
99:e9:33:ee:68:b1:d5:c2:22:11:ea:91:af:33:a7:
33:04:05:3d:45:f3:53:a5:33:fc:74:22:bb:3a:6c:
e8:1a:7f:67:28:be:c6:30:a1:a5:b8:86:cd:bd:c1:
75:c5:3f:94:d1:b3:f6:04:31:a6:24:5d:a0:41:6d:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:C4:01:4C:FD:DB:11:F7:E2:10:4F:D6:78:63:14:74:13:94:19
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b3:bc:79:12:55:34:73:c8:4f:2a:7c:51:ec:60:2b:4c:53:
c7:a5:d0:29:da:b3:1e:34:7e:6f:cc:ed:da:56:6b:75:f2:19:
19:a6:a8:98:5f:b2:f3:78:dc:93:dd:7c:9e:bb:3a:3b:21:f2:
d6:a0:b9:51:d1:f1:7c:45:2b:fa:eb:6b:93:a9:76:bd:44:89:
a7:13:6f:51:c5:32:6e:b0:51:d5:19:11:02:76:1d:a0:88:e9:
ee:a1:96:76:5a:3c:db:f9:42:10:ba:25:cb:b3:36:7d:96:af:
40:42:59:dd:34:0b:b7:0d:ab:71:b6:d9:17:23:7d:46:99:61:
bc:b5:2d:27:72:97:6f:c0:dd:6b:fa:e5:58:4c:2c:27:4e:a8:
48:53:40:f1:78:9b:d9:c5:d5:7b:95:f3:37:8d:9b:07:6f:c4:
4b:8b:ed:3c:d9:a3:26:09:a2:0a:e1:7f:b4:74:1d:36:f9:a1:
f6:ae:6c:01:c8:81:19:f9:40:18:1b:5c:9a:2e:3b:db:8d:6c:
34:5c:fb:f2:b5:cf:dd:b7:8e:70:d0:4d:40:d2:46:d9:c4:7a:
2f:6b:f5:88:92:f6:0d:2f:e4:1f:b7:a3:eb:47:94:cb:42:21:
b4:aa:db:8b:b9:2c:d4:eb:d3:5d:2e:ae:d3:dc:de:d1:cf:7d:
0d:b6:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:03 2025 by rpki-client