Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: qbONNm8Q3m4Ru9IeaOnUJhJhYtiYIPK+ifMzpZrMW08=
Subject key identifier: 9A:A0:A2:43:89:6E:D5:77:63:26:0E:67:BA:AD:CE:CB:56:38:23:E8
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0198D54EACC3E6CCF6D988D8620773440911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 10C1
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: WgD3HbUkTDhnW+vAo05Xpp4AcCH9VWCyQmM88r+yoLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ac:c3:e6:cc:f6:d9:88:d8:62:07:73:44:09:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=9aa0a243896ed57763260e67baadcecb563823e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:2f:9c:6a:9a:be:52:9c:dd:c5:ad:24:7e:
5e:7d:56:04:2a:d7:45:f8:a9:2b:f5:16:e7:a6:81:
e6:74:c6:a6:e1:78:b6:97:f1:3a:22:61:25:81:c5:
b3:0f:76:c1:01:72:a3:23:ee:1f:69:d8:fb:ea:4d:
f1:4c:5d:e0:d2:6a:79:c0:78:04:02:e6:a3:11:14:
50:ce:8f:4a:e6:1b:7f:22:75:1d:ed:ea:df:63:78:
c5:8a:a7:e2:b0:1e:52:6d:ef:29:74:51:68:d0:bd:
8a:76:01:5e:19:3b:35:39:62:6f:71:98:fe:03:ac:
c2:aa:1d:1f:eb:63:7a:5f:d6:1d:f4:cf:42:8b:46:
80:5e:ab:bd:5e:9d:cf:ee:ab:07:a6:3d:e9:71:89:
51:76:28:15:bb:07:84:b8:12:0e:ed:4e:f4:4e:5e:
8a:1b:23:74:2f:fa:c0:ab:03:2b:5a:21:10:5a:44:
49:f9:9d:14:dd:27:b1:2f:2c:dc:ed:67:33:7c:e5:
3d:e1:69:32:f1:61:23:5b:47:46:dc:bd:8b:f7:5a:
f7:35:d4:8c:d8:55:e6:ab:68:9e:b9:f5:db:48:43:
44:41:48:10:bc:19:d5:61:61:5c:cb:91:2a:11:d4:
7f:eb:ba:61:66:a3:67:c9:0f:42:e5:7e:69:a9:3d:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:A2:43:89:6E:D5:77:63:26:0E:67:BA:AD:CE:CB:56:38:23:E8
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6a:9a:e2:e7:e7:83:55:8e:d9:a4:d1:ac:76:b0:bf:b2:68:
22:2f:ef:ba:a5:e5:7d:14:a3:8c:79:a8:86:4a:31:e3:bf:9d:
86:42:22:ef:46:a5:b0:20:64:fe:56:c2:f8:8f:e8:04:a0:59:
c4:c3:0f:22:8b:ad:20:13:4e:5f:f4:f1:cc:2f:f9:4c:e2:77:
be:db:41:bb:ac:1d:15:dc:d2:09:3b:7f:5d:79:d9:f3:a1:52:
47:c7:2f:1c:76:24:9b:f3:bf:2b:1c:48:9d:a7:3e:61:f1:f1:
d4:ee:00:01:31:03:ae:84:a9:7a:9c:12:8b:d5:47:16:99:ac:
7f:68:9f:0e:3e:6b:b0:6c:e5:d0:d5:12:f5:99:1f:0a:a5:20:
0a:6a:8d:59:35:4d:d4:22:b9:12:ec:f9:5e:35:19:a4:d9:3e:
de:45:43:48:e1:de:ef:73:4c:86:db:eb:4b:2c:50:1a:b1:b9:
ff:21:c1:51:5f:0d:8a:a7:3b:e9:97:8f:7f:31:6e:e6:3f:0b:
9d:e6:dd:26:ce:10:08:a2:7c:cf:48:be:c1:5f:3e:88:bb:8a:
22:38:67:20:81:cc:98:e3:36:1b:3c:7f:b5:25:90:c8:fd:d0:
e8:ec:e3:70:92:e1:09:26:ab:e6:45:68:04:8d:84:34:92:04:
14:2d:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:19 2025 by rpki-client