Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 6/PK7er39GLvHB2zx9x7ZBm2y6ZPvndHvk3dWfnWlcg=
Subject key identifier: 36:F9:6E:8C:5B:ED:52:F3:F2:9D:12:2C:BB:6E:E3:20:E8:B0:3E:62
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0198D4A7AD69D765CD8B1E13E7680833F176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 147C
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: /btC0Yw86uDKs4D+6cvev5ZqV+mAEW6fr/Lu4nuS51M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ad:69:d7:65:cd:8b:1e:13:e7:68:08:33:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=36f96e8c5bed52f3f29d122cbb6ee320e8b03e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:5d:a9:c2:bc:ce:2d:35:43:11:40:d2:a1:
f5:6d:52:67:5c:7e:5c:78:d9:2b:0f:87:b8:fc:3b:
ef:08:44:69:6d:0f:77:f3:39:33:d6:20:7f:a0:f4:
41:f7:d8:3a:40:7e:5c:10:3f:3b:51:56:53:a9:a7:
e3:27:c0:f5:f3:7d:05:65:cf:37:9d:d1:cc:20:71:
4f:32:02:0d:2f:5c:c2:ed:4a:6e:8c:c6:7b:9f:92:
b4:21:11:0c:25:2f:76:34:11:f8:ef:d9:b4:6a:a5:
7d:64:da:83:c8:49:01:fe:0f:dd:9d:f7:dc:10:1c:
60:23:a7:d8:a7:21:49:0e:7e:ab:56:c7:c2:49:c6:
98:08:79:ff:cd:b9:c8:f4:2f:69:3b:7e:a8:51:1f:
11:36:2a:a1:df:9f:a7:14:30:46:bd:97:b3:46:8e:
31:3a:49:67:be:7a:fb:eb:c8:5c:02:47:cb:66:a1:
fd:3f:3c:b1:36:e5:93:eb:19:82:f6:28:63:7f:d3:
fd:bc:20:dc:aa:ed:a9:ec:7d:d4:d7:40:3a:b9:e7:
1c:0e:05:d2:6a:ba:1a:71:58:2a:89:14:ca:e7:32:
a4:65:56:02:f9:d8:77:d0:fa:b2:33:7c:95:27:5a:
9f:9b:fc:0f:ec:3a:f7:b3:80:12:ed:87:ff:10:bd:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:6E:8C:5B:ED:52:F3:F2:9D:12:2C:BB:6E:E3:20:E8:B0:3E:62
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:4f:6b:93:bf:3a:57:34:49:70:2a:cc:f8:ab:26:d4:15:
7d:94:a2:56:3e:88:2c:c2:ca:d2:86:19:3d:e6:83:d1:24:b8:
99:12:da:c6:89:6e:d1:78:a9:47:d7:2f:3e:db:a9:76:10:6e:
8c:1b:6e:6a:1a:82:f6:e9:33:97:97:62:56:52:9d:bb:e3:bf:
3b:14:9f:54:e7:d9:e2:5f:a1:89:b4:77:ba:f2:b8:f9:c8:93:
06:d5:85:2a:de:17:37:37:2f:fb:20:c6:2f:d3:a2:36:bd:9e:
1d:96:47:5f:1b:7e:c8:32:62:bb:6d:29:1f:27:79:d1:0c:fb:
9b:8e:e0:02:00:61:0d:11:d3:50:1e:c9:f0:04:43:ec:e2:8c:
a7:d7:63:98:1c:df:8e:9c:6b:18:11:73:70:1a:01:af:4a:e7:
6f:cf:d9:47:09:f9:5f:e9:a2:61:eb:da:62:4d:68:1a:98:b6:
0c:0f:9a:00:81:31:5c:c1:e0:67:e6:a0:ab:5b:7e:d2:f9:0c:
7d:18:e9:71:24:2c:de:c4:27:fd:21:e2:f2:64:da:15:4d:a3:
71:ea:f4:1e:80:37:14:1a:8a:08:5d:7e:e9:0b:18:30:03:b3:
d6:5c:e3:aa:5f:ca:cf:21:b5:63:64:9b:05:7c:27:7d:e8:21:
56:4b:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:46 2025 by rpki-client