Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
File: zf9bPNry6tG8MwlBG_lJLNmHr7o.mft (raw, json)
Hash identifier: rEF2XtC4EgN7dqZFEWv4xJG8Vr4Ksw3qnDFzmpkduUg=
Subject key identifier: E9:B1:AE:61:4B:6F:69:BB:7A:EA:42:2E:2E:CB:EB:B9:97:6B:59:C1
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial: 0198D5BC3F414B4670BC04F8A8FD809D6638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
Manifest number: 04A4
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa (hash: 4LCjfvPAnVknZ+aHhkSXzNTjWeSMT085uGaEj2C566Q=)
2: zf9bPNry6tG8MwlBG_lJLNmHr7o.crl (hash: /KO1TuvB4AsXuO23OpU6Csi2CmPhcCxXRSUQ1ULXumg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3f:41:4b:46:70:bc:04:f8:a8:fd:80:9d:66:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=e9b1ae614b6f69bb7aea422e2ecbebb9976b59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:8e:ed:2e:4a:05:91:1e:0d:9a:8d:5e:9f:
b2:23:e7:42:c5:6b:f2:e3:88:98:90:17:5a:b9:e3:
0f:79:ee:97:71:c8:e2:1f:49:79:33:67:ea:89:bb:
13:10:5c:17:a5:f8:2e:f4:6b:1e:ca:36:a2:e3:85:
96:cd:64:8d:8f:35:77:e3:c2:b0:b4:f4:ca:6a:e4:
79:ff:44:3d:c4:e6:2e:31:37:05:b5:99:57:8b:79:
f4:85:eb:f0:d0:5d:48:0d:a9:d8:34:98:39:52:cc:
ee:24:a4:f5:7b:6f:26:f7:db:ee:92:ef:18:2c:4c:
ba:4c:ad:eb:26:c7:c3:6e:9d:ca:2c:79:d2:5b:34:
63:f4:9f:ec:7d:11:68:ee:52:03:46:11:cb:39:d5:
32:31:fd:4b:d7:de:ac:99:1f:3d:9d:61:cc:eb:26:
2f:2d:00:54:d8:6a:88:02:64:71:12:de:79:9a:ea:
c7:f7:e8:a0:fc:f7:01:32:d0:d9:58:ee:86:1a:10:
03:9b:a9:90:5f:52:ad:5d:79:2f:bd:a3:e1:a7:93:
2c:47:a4:a2:61:96:08:a6:8a:3a:d9:da:17:09:9c:
4a:9b:7f:a2:1d:8c:94:dc:67:79:62:ef:1b:6e:b0:
0d:08:b7:86:a3:fd:81:11:c1:90:58:1c:c4:69:5d:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:AE:61:4B:6F:69:BB:7A:EA:42:2E:2E:CB:EB:B9:97:6B:59:C1
X509v3 Authority Key Identifier:
keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:c2:dd:63:4a:82:5d:5f:86:fc:4b:6d:8a:16:41:6a:e5:
df:87:dd:93:14:b8:39:00:a6:68:fc:a2:7f:4c:24:09:f4:47:
48:f3:67:3a:39:d0:74:58:2c:8e:32:24:56:b2:1a:62:da:2f:
29:8f:41:29:48:f4:09:19:c5:4e:3d:75:45:e8:e3:ed:20:a5:
5f:78:fe:de:b4:d3:ff:2a:16:b3:5d:0b:60:68:b1:eb:67:38:
d3:ef:45:37:bd:4c:83:22:3a:f2:07:59:98:a0:2f:dd:1a:11:
53:43:c9:e0:66:7e:60:2a:3f:47:31:b4:74:87:81:f8:c0:46:
5d:14:18:8e:2a:11:80:27:71:4a:58:ac:7f:be:19:13:8d:9b:
f8:fc:7e:46:e8:86:0a:35:a2:81:b4:00:44:99:27:ed:2f:36:
1b:49:0a:50:31:be:10:e7:4f:64:b2:bf:99:88:80:53:a2:65:
33:f8:10:a1:14:50:59:7f:d1:84:ff:a5:7c:43:41:8a:e2:14:
df:a5:67:9b:95:81:a3:0c:8c:c1:6d:bc:6e:4a:f3:77:c1:a0:
86:91:05:26:d0:d9:a8:fe:6c:db:11:54:a2:ac:b2:f7:af:a2:
b1:fd:44:aa:35:51:df:f3:fe:3d:f8:4a:57:20:68:04:52:89:
ea:32:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:22 2025 by rpki-client