Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: ZhrH/RDIEuRP7w9fGqh2j6a1D0JhhBMofuWoiSxZBa4=
Subject key identifier: BC:C7:B0:A6:15:3D:27:54:22:7C:36:45:81:BE:5C:66:A1:42:F4:71
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 0198D6604564939C4B8CEC769101D1E7EEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 02B0
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: 1asLoOPsrmdpSvvyUtG8QcUoYKf2kT8zodjSuXs5a/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:45:64:93:9c:4b:8c:ec:76:91:01:d1:e7:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=bcc7b0a6153d2754227c364581be5c66a142f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:f3:a4:c0:ba:be:73:00:eb:4e:42:e2:7e:
61:ae:1d:eb:c2:d4:03:72:6c:c9:49:95:2c:d7:e2:
00:d6:a8:04:d4:6b:d8:ed:a2:0b:45:70:60:54:bd:
3c:9b:78:ba:85:de:27:dc:b7:d5:f7:d2:22:5c:f4:
a3:4d:7c:60:64:54:ca:70:2f:31:ce:bc:91:59:09:
f4:04:90:e9:30:4c:f1:05:94:79:ff:8b:0e:a1:d4:
e1:a6:9d:e2:2b:2a:94:b0:a3:6f:ff:fb:44:f9:1a:
8d:10:93:89:66:f4:7f:df:11:a0:c6:19:93:64:2d:
a4:25:8b:41:c7:4a:e2:a0:36:6f:3d:da:d1:2e:55:
d6:dd:1b:01:53:7a:4b:09:32:b3:76:3f:92:f4:29:
d4:03:7a:be:3f:d2:7f:7b:f7:37:81:81:62:46:db:
6c:b6:91:ab:e7:18:76:d1:da:5d:34:39:ea:9a:53:
a6:f5:bb:86:ce:e4:1b:7c:e6:45:a9:88:e6:7c:a5:
08:60:59:59:7d:f3:4b:f0:b7:70:9d:ea:e5:a1:b0:
e6:1a:22:fd:fb:34:42:48:09:c1:9b:30:ce:85:c4:
de:ca:a0:d6:af:e8:39:2e:b0:4d:73:a4:5f:db:eb:
1e:48:bd:43:3f:18:49:e9:b5:43:0e:56:68:3a:fe:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:B0:A6:15:3D:27:54:22:7C:36:45:81:BE:5C:66:A1:42:F4:71
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:14:0f:0c:31:de:af:5a:81:26:84:de:ef:c9:86:59:c7:
d1:76:69:d3:6d:8c:8e:26:0f:be:f1:9e:ba:38:59:65:39:5e:
06:90:4b:03:29:e6:b7:3d:5b:7a:b9:51:25:0b:1f:22:40:19:
c3:d7:60:45:9f:bf:90:5e:24:1b:df:74:20:4d:4e:be:67:d4:
78:d0:ed:b7:31:35:0b:6f:16:a4:c0:1b:78:5d:de:3d:09:2e:
3b:c7:0d:77:1f:d3:30:e0:dd:ea:16:fe:70:41:45:9a:43:23:
40:79:70:0c:dc:e7:b8:cb:74:1b:39:99:c3:4c:60:54:9c:1e:
0c:b4:48:81:50:bc:16:ec:a8:a7:b2:60:10:28:23:76:5f:d1:
92:8f:b8:02:7b:1c:2a:d7:a4:98:5c:a3:69:4a:9d:b1:ad:3c:
d7:64:0c:29:c1:94:cc:bb:af:9e:57:5f:74:6a:1b:77:62:00:
50:13:9b:d9:9f:e9:66:cd:d5:f9:40:ff:8b:c4:c1:4c:b4:06:
56:e0:f1:a2:09:3d:8e:39:d6:a1:02:6d:52:a1:34:1d:f6:d9:
9f:e1:2b:5f:68:1a:89:19:8f:ee:0b:22:cc:32:ce:f2:ac:84:
70:50:14:a6:e3:69:68:40:b4:29:54:39:88:a6:54:c9:66:3e:
c8:e6:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:17 2025 by rpki-client