Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: kviGxPTxfzEQUrsfo17wDhQm6L8deoPMRyt0Kisl+Vc=
Subject key identifier: 42:5E:66:5D:CA:BC:82:F1:A7:31:A2:EB:83:18:3D:C6:62:5E:11:E7
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0198D4E0EB91385D9D14EAC2A3D0E870052C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 036A
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: Jg/fMWuZF1jkAcnEki0WkpUkIGmNOLAu1dyiRfCLC1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:eb:91:38:5d:9d:14:ea:c2:a3:d0:e8:70:05:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=425e665dcabc82f1a731a2eb83183dc6625e11e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:16:87:02:b6:2d:8e:72:2b:93:4c:d2:2b:
e0:01:c5:eb:ac:a8:54:93:8a:b1:34:59:2c:25:af:
d3:c1:16:0a:61:13:aa:f1:1c:a8:30:c3:de:14:67:
04:0e:7f:e7:01:40:fa:57:6c:e6:f6:6d:2a:16:69:
a2:ae:fe:64:2c:6b:bf:0f:70:4b:71:c5:62:b9:9b:
33:f6:37:27:ab:15:42:52:5c:0d:df:a1:53:e4:68:
f9:02:36:9b:93:cb:a1:d4:a0:eb:57:ba:f5:77:d0:
46:bc:50:7f:12:b0:e9:94:7c:57:71:fa:ce:d1:bd:
14:e8:1a:71:60:b5:62:e2:54:85:df:64:98:2d:e0:
c9:dd:e5:a2:53:f2:98:1b:e7:76:23:90:bc:e7:2c:
ce:80:6c:a6:2d:10:0d:bf:3f:28:4d:26:61:cd:22:
ed:84:68:79:bb:9e:87:e6:8a:8f:7e:8d:54:0e:bf:
ef:16:99:b2:70:1a:a2:3a:79:b6:48:e8:f0:6d:67:
99:e1:80:b6:1d:61:e5:55:cc:17:20:50:ea:a0:44:
4d:59:18:6b:76:6a:9f:f9:45:25:04:e8:93:45:0f:
3a:18:a1:8a:2a:ce:ee:0a:dd:35:18:c4:1b:e9:d3:
df:ae:f1:01:64:3c:1b:23:f8:b5:cc:92:d3:f2:51:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5E:66:5D:CA:BC:82:F1:A7:31:A2:EB:83:18:3D:C6:62:5E:11:E7
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7e:79:9f:c1:55:09:ba:a6:2e:ed:a2:95:6f:cb:f2:ed:b0:
13:09:cd:ea:6d:cf:0c:21:f6:ca:b0:d2:b6:f0:48:d8:05:fd:
e1:26:77:b8:09:cb:5e:17:78:c9:70:9e:eb:e4:be:b6:24:f2:
ef:6f:fd:e5:9d:16:d1:3d:f6:ac:88:bb:e9:93:a5:95:c1:1f:
ee:84:44:53:cd:b5:95:56:01:9d:98:5b:d7:92:79:bd:05:b9:
13:73:e1:8b:e9:95:14:b4:3c:c5:f4:bf:48:ec:ee:4c:b0:f7:
a2:bc:af:f2:35:f3:f3:c8:f1:c9:95:db:f1:ec:df:f7:ff:70:
f1:47:80:3d:93:e7:c4:23:ac:1c:24:88:28:7b:b3:21:8b:20:
1a:01:d1:88:80:76:4a:7c:40:5a:c4:c6:94:88:2d:29:f0:e2:
2d:26:3b:ee:ea:31:92:e4:b3:b1:6c:8f:1b:b0:cb:a9:bd:d8:
a9:4d:b9:40:96:38:46:f9:8b:c3:71:f2:90:98:78:4c:c1:6c:
9f:8d:b0:8d:fe:3f:ce:50:98:7b:52:d6:40:1d:43:4d:46:78:
ff:03:8e:e7:f0:d8:d0:f0:4c:87:90:be:24:de:3d:b3:f1:f5:
48:e4:58:13:bd:be:36:32:cb:5d:b2:eb:22:e5:98:95:e4:8b:
7e:0f:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:56 2025 by rpki-client