Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: HBWBTnsAExiutjsIgILjruSZxrdJ6SYixBTabFryMfc=
Subject key identifier: 05:E9:7D:E2:F3:00:F4:EC:F1:74:BC:B3:F7:7B:FD:4A:5F:6C:05:E3
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 0198D515C31BFE3EA6A68A59F17F5338E5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 070C
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: 3KhQBM6o6XeENduaJqiVVqzJRtAf3ov8XpZaQtce8IY=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c3:1b:fe:3e:a6:a6:8a:59:f1:7f:53:38:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=05e97de2f300f4ecf174bcb3f77bfd4a5f6c05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:39:59:3c:08:1a:c5:cf:83:a7:c6:53:f6:
6f:8a:78:81:27:f9:75:37:4d:71:7f:0b:94:6b:bd:
c5:1a:e3:18:67:11:19:f0:f4:28:01:14:b9:89:13:
2b:4d:70:8c:2f:22:00:94:21:2e:af:8f:93:b1:50:
8e:c0:05:bf:b3:71:39:04:63:7e:99:9b:9e:09:13:
4f:aa:1b:29:d2:34:03:2f:e8:08:62:0c:3b:db:71:
d9:14:1c:94:b0:20:f8:f6:f1:be:7d:01:be:a5:47:
6d:96:6d:1b:5a:46:56:a2:bc:95:c1:17:55:a5:07:
35:30:6e:fb:be:5d:83:1f:b9:7d:61:5c:f9:7e:cf:
f6:b4:29:02:a1:5d:e3:0e:65:00:2a:e7:b6:bb:9f:
b8:fd:53:03:b6:47:d1:89:f7:5a:bb:43:df:a1:ac:
b8:5c:cb:6c:70:75:df:72:ad:59:49:18:ca:42:d8:
0e:bd:3e:a7:f0:9a:4e:b0:fa:b8:d5:f2:e1:7e:80:
b0:45:2f:24:a6:8a:4f:21:ec:33:a6:b9:a1:84:87:
cd:67:68:a7:08:c0:4d:37:37:8a:24:f5:90:60:e8:
3d:09:9d:7b:6c:5f:a8:d9:4a:00:4f:2b:b7:a0:49:
39:db:c8:32:a5:52:2d:a3:1e:7d:e0:e4:b7:b9:01:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:7D:E2:F3:00:F4:EC:F1:74:BC:B3:F7:7B:FD:4A:5F:6C:05:E3
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:af:38:42:08:9c:88:18:5f:2a:d9:c0:2c:d8:38:1b:58:fe:
b5:2b:d2:63:dc:70:cf:0e:7d:30:52:6e:7c:b7:bd:eb:e3:83:
be:03:f1:18:b2:13:07:1b:12:34:6c:4f:f0:73:a7:13:64:00:
b7:5a:33:8e:d3:f8:68:17:f7:a2:19:57:05:5e:85:63:d3:93:
49:ae:26:36:c1:79:11:49:76:12:44:16:ad:86:ac:1c:0f:34:
de:b7:71:cc:21:a4:a4:1c:2e:46:ce:1d:5b:b1:6a:32:c0:50:
f0:a9:1e:34:cb:ea:97:34:65:b0:42:74:e9:b9:7e:1c:6c:0d:
18:f8:13:12:fa:a5:1c:4c:2a:c2:23:a9:b3:3d:c5:9d:29:99:
4f:02:78:88:4d:89:1d:da:d2:a1:cc:b1:40:c8:a2:5c:f8:88:
cf:d8:82:fb:4f:2c:49:d4:82:c3:9c:aa:e6:04:e2:90:fa:ba:
bb:ec:0f:9c:94:2b:26:f7:da:09:d1:4b:5c:a5:98:7a:b7:0a:
20:21:fe:41:a3:c0:45:8c:fd:3e:c7:9e:d4:74:3f:cb:2a:02:
5a:41:87:35:8a:95:77:26:05:66:0c:9c:0f:50:74:73:f5:5a:
ed:15:4a:09:88:04:d1:78:de:3d:76:98:9a:e3:d9:b0:ed:8f:
75:af:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:35 2025 by rpki-client