Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier: MBJ7kIJkD0lqT/e/+H5S4qQh8c/pcFnkuR3LE2a0JPk=
Subject key identifier: 5A:9D:61:9F:96:B0:CE:BF:DC:B3:E1:2E:53:2A:DB:4C:84:3F:8B:19
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 0198D5161C8A3812BC17861D192CA22A6114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number: 10D3
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: BZoMK+6707hX7GBK17jBvmBFoueDnsApTMFf/Ug73eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1c:8a:38:12:bc:17:86:1d:19:2c:a2:2a:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=5a9d619f96b0cebfdcb3e12e532adb4c843f8b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ab:a5:dd:a0:07:7c:72:b0:33:1a:b5:06:
e0:ae:6d:50:a6:ae:fd:4f:ea:9a:d8:31:a9:8c:71:
70:75:40:fa:9a:d4:fc:5f:44:6b:34:c0:bf:f3:fb:
16:45:c5:ac:5b:b8:20:4c:6a:17:60:8f:25:a5:dc:
4b:06:3d:21:78:89:b4:67:24:91:e7:c4:11:57:83:
75:33:5b:1c:60:a5:0d:e1:c5:2b:de:c9:85:a4:7e:
1f:fa:a0:a3:ef:3f:d2:2d:c1:34:28:cc:ee:82:78:
ea:42:d2:5e:7b:96:5f:c1:92:b1:18:39:9d:5e:77:
14:6b:66:f0:fc:3d:5d:39:61:b4:d4:8f:35:b7:38:
90:be:38:a9:05:0f:8b:6a:3b:13:00:8a:48:49:d0:
ad:f0:f8:a8:50:e1:af:3d:55:98:3f:94:d4:cd:53:
89:b9:97:91:d7:d0:7c:4d:6c:dc:59:20:00:9a:81:
a2:57:2a:0e:c4:28:d9:84:75:f1:0e:7b:51:43:6e:
2c:75:ae:29:9b:88:5a:f9:85:6a:56:b6:88:9e:ad:
7f:24:dc:01:4e:70:cc:99:51:f5:57:b2:5c:99:67:
96:13:08:81:34:a6:00:ee:89:7e:b5:42:36:7d:64:
51:fd:1e:80:8b:d6:f5:27:5b:ec:6d:cc:5b:02:df:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:61:9F:96:B0:CE:BF:DC:B3:E1:2E:53:2A:DB:4C:84:3F:8B:19
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:bd:ee:75:58:49:f9:a7:e6:b7:e3:7d:36:5c:22:4c:8a:
24:21:64:89:40:14:db:95:52:e6:3f:f0:9f:e9:a4:f0:7e:1a:
fb:b4:91:04:57:72:55:e4:2c:ed:39:a2:dc:2d:00:3e:ea:e5:
fc:9f:07:cc:43:40:db:5d:bd:c5:30:9a:6d:8a:f1:d0:00:64:
aa:af:e8:37:95:cb:82:68:d8:df:cb:c8:0d:36:17:20:1d:4c:
3b:a5:7d:8a:11:e9:9c:c9:51:59:5c:06:f3:cd:42:2d:6a:b5:
fe:95:19:1f:a1:61:9d:cb:60:fb:1a:10:57:e5:aa:cd:69:aa:
93:ec:f9:51:de:f0:35:18:00:ae:c8:97:87:70:eb:ea:94:6a:
20:15:83:ba:a5:d0:bd:15:c1:ca:a7:21:63:d2:32:97:cb:79:
31:ce:ca:67:35:83:98:1f:96:76:66:4f:3f:57:5f:ca:93:fd:
eb:8e:2b:0f:84:54:4a:28:25:3c:e3:c1:33:0e:21:af:98:14:
d6:9b:fd:e2:e9:5f:9d:f4:10:86:c0:49:86:7d:dc:73:d8:a6:
ac:bd:d6:16:0a:69:84:78:dd:b4:e8:1b:c2:2d:06:1a:92:2f:
0c:9d:5d:59:01:bc:a6:d1:82:a6:fc:53:57:77:01:0a:99:19:
72:d0:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:50 2025 by rpki-client