Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: RqU+qioCfZ9sOUcsksC/541K82/xw7mXVXUqIQYty9I=
Subject key identifier: 78:22:76:D4:D7:03:F4:5B:BD:B0:10:54:AE:99:85:0C:76:E6:54:EC
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 0198D6611F78A6B74F44312EF65E94BF4838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 025D
Signing time: Sat 23 Aug 2025 10:02:25 +0000
Manifest this update: Sat 23 Aug 2025 10:02:25 +0000
Manifest next update: Sun 24 Aug 2025 10:02:25 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: 0Cv7gtuUBJJvDyShSgMccBDTBOlq5228VEFLnvWykJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:1f:78:a6:b7:4f:44:31:2e:f6:5e:94:bf:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Aug 23 10:02:25 2025 GMT
Not After : Aug 24 10:02:25 2025 GMT
Subject: CN=782276d4d703f45bbdb01054ae99850c76e654ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:34:88:f4:44:47:1e:f8:fb:22:a1:a1:75:
93:0a:98:36:d4:c2:d0:3a:d4:f2:2a:1a:e9:86:4c:
aa:32:86:d8:c3:50:e2:0d:8e:00:ac:af:da:b8:f6:
64:6d:97:9b:69:0f:59:3f:ac:f1:8f:5b:b8:00:e5:
e3:a8:ae:37:f3:a4:79:cf:8b:2c:00:77:c8:52:c7:
c1:11:d1:5a:84:38:77:dc:5b:b7:f6:8c:21:05:84:
33:1e:6e:fd:96:78:cd:c5:00:3b:42:1c:bc:c7:f1:
be:09:d6:8c:3e:e9:76:23:7a:c6:83:b8:40:43:ae:
45:d7:f1:f1:cc:c1:4e:af:f6:a3:b0:47:37:f8:5c:
9d:5f:03:f4:19:6e:2d:98:2a:11:26:bc:c7:e4:36:
b7:f1:69:d9:4c:8a:9d:ae:48:d0:55:7e:4b:86:4c:
4d:92:bc:18:ea:9a:bd:d4:3f:1c:0b:05:0c:6e:bd:
fa:75:3e:ae:22:bc:30:f5:2c:0d:41:13:24:22:cb:
72:76:ea:2b:89:9c:93:a8:a5:82:06:c4:4b:7d:cf:
a7:87:74:48:4d:79:11:a8:4a:45:fe:58:16:bc:06:
e7:1a:74:ee:33:62:3b:bd:ec:28:fd:25:3f:74:7c:
56:e1:79:c9:74:fe:4f:1c:57:cb:8f:6c:f4:c6:42:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:76:D4:D7:03:F4:5B:BD:B0:10:54:AE:99:85:0C:76:E6:54:EC
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:9c:0c:97:72:2e:fe:d4:a4:e8:4a:1c:bd:55:2b:57:02:
04:d3:7f:72:16:98:d5:57:fe:de:79:99:03:a0:23:b6:57:48:
0b:2a:2d:e1:54:22:91:da:9a:47:5d:5e:d8:8b:3f:0d:7b:8c:
4b:94:51:b9:03:2f:88:38:68:95:43:db:4f:7e:24:ab:72:6d:
8f:31:e8:3a:08:3f:99:db:2e:e7:05:ca:08:22:26:d0:20:df:
e7:1e:72:77:61:f0:ed:6e:25:ad:68:fb:9d:e0:51:3a:a8:14:
8c:8d:40:9e:8d:38:9d:f0:4c:45:3a:ba:2b:da:a6:2b:25:07:
e9:dd:5f:0c:b8:13:0b:eb:fa:8e:44:f5:29:b8:7e:1f:e7:e1:
60:07:45:4d:13:9e:74:11:6d:34:f2:81:c0:44:df:4b:d1:97:
f8:ac:82:31:9d:f7:ae:12:81:36:d7:08:0a:66:84:bb:6a:0b:
e0:9f:6d:21:e4:fd:37:1c:8f:00:d0:f6:e0:6c:f5:d6:e2:3e:
8b:c7:40:03:24:86:2f:d8:58:b6:4c:ee:2e:54:80:fd:58:f9:
5f:80:f7:aa:45:cf:0a:88:fc:69:87:69:1f:ae:0f:ce:39:ff:
86:dd:6a:58:90:ac:6b:2a:11:4d:39:50:71:34:e5:9e:0a:22:
77:d8:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:55 2025 by rpki-client