Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: 5Zbj9+HAVQPRAsviWLQ5SAaecYa237Ua/nXzeT9L9fo=
Subject key identifier: C0:DC:88:0C:FE:73:60:59:80:64:42:7E:EE:02:6A:9B:A3:D9:5D:0E
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0198D583D03B73ADEC22B999024C1830011D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 03D2
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: ELfKMpbAhkBAAx2Myt128xPIDveL/TW0VEvt7b72kbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d0:3b:73:ad:ec:22:b9:99:02:4c:18:30:01:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=c0dc880cfe7360598064427eee026a9ba3d95d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:0f:a5:30:a8:5f:51:5a:43:7a:22:c5:86:
f4:76:3c:41:97:ea:8f:6e:60:55:c8:58:23:13:44:
f5:28:94:02:d9:c0:7e:b1:26:58:08:d2:f1:c4:56:
b5:26:d8:fb:1d:52:66:26:3b:74:f5:49:39:b5:5e:
b3:79:a1:3a:a2:5a:e7:32:9d:91:0d:1f:3b:90:51:
f8:12:b1:6d:79:2f:13:c6:29:aa:15:b4:1d:30:4d:
cc:ed:f4:da:02:97:7c:2f:bf:93:b5:d4:71:50:9a:
dd:e7:ae:13:d6:b0:e0:6a:08:60:2f:cb:d5:32:60:
37:af:20:02:48:7c:6f:19:25:70:bc:16:52:2c:8e:
7f:1a:e3:9d:35:21:ec:2e:e0:3f:d6:d1:42:e0:85:
4e:e6:69:ab:8b:48:4d:79:fa:4b:8d:e3:f1:01:f3:
93:5a:49:65:f0:56:ee:be:44:36:2c:fb:ba:93:3d:
99:bf:c4:7d:f1:ac:d8:dd:d9:c6:d7:68:f6:ac:ef:
ba:20:4b:de:7f:a7:a3:00:b8:be:bb:ef:07:d1:b8:
cf:65:2e:4a:ee:4c:22:c4:c3:d1:6e:96:44:b7:f8:
12:40:9a:2a:17:33:08:15:12:c2:c8:8d:89:bb:bc:
4a:21:70:38:1a:c5:27:ef:34:4c:51:23:0f:4b:e8:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:88:0C:FE:73:60:59:80:64:42:7E:EE:02:6A:9B:A3:D9:5D:0E
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:17:78:cf:16:97:0a:9b:c5:91:c7:41:3a:e5:22:69:86:b8:
18:19:aa:34:c0:ff:6f:e1:aa:41:59:d8:e1:32:18:37:4a:1d:
59:88:fb:be:a3:92:7e:1a:2f:23:0a:f7:c1:47:e3:c1:02:a8:
5a:a6:06:51:05:6f:9e:ee:20:03:2e:ea:04:32:5b:24:28:53:
96:17:9b:7e:6a:cb:7c:f4:e0:23:18:65:5b:85:dd:f9:ad:9c:
c3:71:b0:ae:9d:bc:a4:6a:01:49:f0:f4:13:e1:c5:f9:3c:1b:
00:b6:d5:ac:f6:c7:79:74:ba:04:6d:d2:08:3c:dd:65:25:16:
0a:74:3c:be:6c:e2:ec:cd:08:97:aa:1c:32:16:f8:33:6c:9d:
79:2b:2f:d4:59:c3:7f:67:60:c5:07:34:d4:a1:e5:ab:a9:7c:
d7:57:42:d4:06:2d:76:bd:0b:bd:70:9b:9d:42:ba:2e:6b:c2:
68:42:46:b3:c0:03:db:43:69:4b:3e:b2:70:5e:20:3a:0e:e2:
95:87:f4:43:98:70:aa:d8:87:ef:6d:73:85:f4:52:ef:1e:42:
03:47:e7:98:47:ae:dc:b5:92:d5:3c:a9:48:01:2d:0a:82:9c:
71:6a:45:20:48:1d:de:39:96:63:f1:e3:0b:2c:49:4d:d9:f5:
08:2c:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:55 2025 by rpki-client