Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: SKy2Lu1gZinsCDrxKxFjwNXqP71EGBDexT+we15zsxQ=
Subject key identifier: 35:0B:B1:46:4B:F8:AA:11:0E:A3:0D:EF:C6:44:2F:0A:C5:A8:A0:90
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 0198D515ABEABA58B0A7E8F0713F68DDBD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: FJM+f8LMcG81z4JkaZ5Prhm30lFzwcjNWsG5gcGgNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ab:ea:ba:58:b0:a7:e8:f0:71:3f:68:dd:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=350bb1464bf8aa110ea30defc6442f0ac5a8a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:19:94:22:0f:bb:1c:79:a2:e0:11:39:04:
d3:83:71:3c:7e:f0:85:7e:86:2f:00:73:3c:ea:05:
38:ee:30:e9:0f:d8:cb:44:a2:ca:be:6e:65:ff:e5:
18:4f:d3:38:60:7c:30:11:22:5a:d0:53:eb:17:e8:
dc:92:66:07:20:24:05:75:f2:64:f0:ba:f5:61:28:
ab:e4:f4:05:bc:8b:09:f3:ef:7a:83:23:08:d6:b0:
4d:5f:51:bb:bd:e8:f9:06:a0:b7:3a:b3:44:b4:11:
19:7a:e6:ac:5e:91:a9:91:fd:92:03:e0:19:f8:94:
fc:dd:0b:64:b0:a5:72:f7:1e:f8:36:9b:04:bb:eb:
5f:d9:22:7c:a5:a2:84:ad:67:5b:7f:fe:03:9c:53:
3f:72:0e:2a:12:ad:25:f8:ff:44:97:74:c1:d3:6c:
79:1a:6d:84:a4:b8:b0:54:48:99:3d:c0:ed:6c:96:
f5:7a:0d:cb:8d:a0:13:8e:50:65:25:91:49:dc:b1:
89:e7:2d:71:f8:e5:40:a4:01:7a:72:ce:32:8e:ee:
81:ea:d4:e1:2e:c6:f7:72:5c:22:68:d2:b8:5b:a2:
ed:64:7b:4c:bc:60:1e:70:a0:62:bb:84:38:b2:78:
1e:0f:ae:1a:8e:b6:b1:f4:3e:02:b4:09:5f:d2:c5:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:B1:46:4B:F8:AA:11:0E:A3:0D:EF:C6:44:2F:0A:C5:A8:A0:90
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:b9:84:5f:ed:55:f9:33:da:68:5e:3c:8b:09:75:b8:50:
4b:56:52:23:ea:a3:df:02:01:84:8f:36:81:6b:ee:bb:d6:69:
35:39:63:64:57:44:01:d3:be:1b:5b:9a:d8:2a:5e:ab:8b:73:
36:3e:91:7f:4b:a4:e6:92:a8:83:b3:a9:9a:e8:ca:0c:b2:08:
50:40:11:8e:b1:e5:d3:b9:3e:93:e6:a6:ff:40:c2:0f:84:0d:
4e:7a:fd:be:54:9d:7f:2d:82:c3:c3:66:3c:85:46:e5:88:a3:
29:15:e9:1d:c5:69:63:d2:f8:8d:5a:8a:51:81:c6:fc:c7:d9:
91:2b:68:62:13:22:cb:de:a3:23:33:01:5e:fe:7c:1f:13:de:
53:80:40:45:3b:7a:6c:71:13:6d:35:ac:03:aa:10:d9:c7:71:
08:2d:a7:ab:3c:88:26:fd:24:c3:1f:c2:50:61:e5:76:4e:25:
20:22:0c:ff:fc:39:2f:bc:75:5e:00:e9:5e:64:89:17:58:37:
7a:b3:37:a0:29:7b:fb:72:a9:70:80:b4:5f:39:3c:5c:0b:83:
41:5b:58:cd:03:8e:eb:84:5c:1c:df:c4:a0:bf:83:f0:61:c1:
7d:d2:cb:54:a6:34:e0:e9:8b:08:82:1a:5b:31:24:a0:36:27:
f0:50:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:34 2025 by rpki-client