Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: cfhVLjhzqLkGNkTYDSyLZqeemO3cVoxnJwXMm43fJ1Y=
Subject key identifier: 84:11:8A:FE:4C:C3:72:89:6B:86:66:A3:A9:C1:A5:82:D0:0C:C5:BE
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 0198D8514CE9AE1B9EF9EA294F245CB1DEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 19:04:23 +0000
Manifest this update: Sat 23 Aug 2025 19:04:23 +0000
Manifest next update: Sun 24 Aug 2025 19:04:23 +0000
Files and hashes: 1: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (hash: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: 2Uq/QaicPgFi5+R6L4ATbWY3VAh5zL6bOXmM8iFg12Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:4c:e9:ae:1b:9e:f9:ea:29:4f:24:5c:b1:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Aug 23 19:04:23 2025 GMT
Not After : Aug 24 19:04:23 2025 GMT
Subject: CN=84118afe4cc372896b8666a3a9c1a582d00cc5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:73:fd:ab:ee:03:d9:ab:41:f4:9b:34:0a:
da:9e:11:79:2a:70:bb:ee:ae:ae:fa:ef:2b:df:d2:
22:4b:bf:32:9c:b0:c3:85:e9:cf:b7:d5:3b:57:3a:
69:22:80:2a:aa:da:bb:a9:fe:4a:08:10:6d:3f:95:
7e:53:51:7e:43:c6:d5:79:ec:04:f1:a8:7c:52:a3:
f1:4d:ba:fd:7a:be:4b:41:ae:36:c7:8a:41:92:56:
f4:17:ef:d5:e5:37:c1:4d:30:1c:25:1d:01:93:6a:
e3:ea:fa:1b:bf:c8:60:4a:c2:11:25:6e:ef:57:6a:
de:12:5d:04:51:3a:68:3e:45:48:c5:25:22:92:19:
e5:96:e3:02:11:2f:56:85:3e:58:bd:e7:c0:c6:e6:
91:95:92:78:3f:34:f8:f2:80:47:c8:3c:d3:0f:d2:
e0:bc:0c:6b:0d:d3:b4:1b:b9:1b:ef:ae:82:56:3c:
38:d4:0c:57:43:7d:73:d3:5c:23:27:89:14:72:86:
2d:bf:13:8a:d7:64:32:25:ac:92:cb:d4:be:94:e9:
22:3d:19:c6:4d:ff:65:87:94:fa:91:20:65:79:07:
3a:c1:f7:6f:fc:cc:5f:a9:b5:9a:91:93:a3:05:f5:
26:53:38:e4:0b:98:cb:eb:61:3f:9a:db:66:02:fd:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:8A:FE:4C:C3:72:89:6B:86:66:A3:A9:C1:A5:82:D0:0C:C5:BE
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d5:c7:75:c2:b6:c4:6a:62:e4:15:47:4a:71:d5:b8:60:57:
ba:42:3d:35:ae:5c:82:a9:bd:36:14:48:9a:f9:ae:ca:c3:68:
cc:25:cb:33:fa:07:a2:75:94:8b:09:d6:d5:2c:48:5a:c0:a5:
43:27:0a:e4:97:47:36:e4:aa:cb:59:61:82:15:54:9f:28:98:
7b:30:d5:c1:79:c6:8b:9f:0c:a4:c5:ee:a7:ad:d0:13:c7:1e:
38:32:8e:70:9c:97:d4:0f:50:32:74:2a:d9:e3:68:d9:c0:14:
34:6f:6d:9f:f6:4d:a0:33:7d:cf:bd:7a:87:5d:8a:79:54:18:
d4:a0:12:ac:a7:da:84:ad:8a:22:91:59:48:e3:90:c7:c4:f7:
c9:03:6c:c8:fe:13:42:b4:04:44:e9:d3:4c:da:91:e5:62:2c:
7c:64:2e:87:a5:27:51:ba:aa:c4:86:42:9b:5a:8d:0e:95:9e:
52:6d:fe:63:59:f8:03:95:39:92:ed:ed:9b:da:3d:aa:73:6e:
02:fc:93:92:4c:16:4f:b3:e3:2c:f4:24:24:2c:ba:8a:33:bd:
d3:89:76:13:83:ee:e9:81:89:54:0f:cb:4a:ae:96:97:41:61:
72:36:ba:fa:db:12:8d:58:32:24:59:e8:d2:e4:d8:e7:45:73:
b7:79:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:04 2025 by rpki-client