Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: rABqnicpPIR7Qk8tCAqeLHyDXQhN0mjzZHWqtE0MDjo=
Subject key identifier: A6:56:9C:5E:BA:59:8A:8B:50:44:0D:A4:0F:28:52:70:9B:C7:BA:E8
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0198D698130CEB090A4C8C95B75208CE8E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: 12dKB3tNj+vzch6aYrHKc45r1h+jk4JEYIDv2+q94bk=)
2: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (hash: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:13:0c:eb:09:0a:4c:8c:95:b7:52:08:ce:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=a6569c5eba598a8b50440da40f2852709bc7bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:20:3b:85:81:b5:ff:17:a8:36:dc:3f:74:f2:
57:40:80:96:71:22:1c:b6:70:de:5f:63:5f:f4:d5:
ba:be:6b:4c:87:e5:bc:13:54:bc:c0:d4:8e:5b:fe:
01:49:42:87:d2:a2:fc:68:57:83:47:17:da:ee:b7:
0e:c0:3a:36:ef:11:58:02:87:8e:ba:17:86:43:02:
1c:90:70:4c:cf:a1:f0:e6:42:2c:e6:54:ea:e3:1b:
26:44:e0:d1:c7:9f:c5:32:24:63:1c:2d:46:30:e2:
43:cd:d7:74:20:e1:58:20:b7:91:5c:c3:08:5d:47:
35:84:71:07:d9:95:a1:80:c2:34:75:e0:cf:ad:16:
b9:a1:6d:3e:85:ce:0c:c3:2f:58:16:97:44:fd:6d:
4d:95:8b:d5:19:d1:d7:57:17:1a:2c:90:78:93:fe:
80:5c:91:77:3f:e1:e1:1a:1d:91:14:50:46:fb:00:
16:94:f1:3e:ca:1e:bb:6d:3a:27:98:8e:da:6d:47:
92:0b:7a:55:9c:3b:dc:ed:f5:6a:37:68:70:08:15:
d6:0d:c4:a2:12:4d:5e:91:8c:29:76:cc:c3:ad:a7:
7e:c3:de:52:d7:55:af:76:5b:41:1b:4d:fe:64:79:
8d:a7:62:90:16:ca:ca:64:64:37:f2:b2:12:9e:e1:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:9C:5E:BA:59:8A:8B:50:44:0D:A4:0F:28:52:70:9B:C7:BA:E8
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d6:de:d8:84:a4:50:cf:70:29:0b:c8:67:33:db:ab:20:ec:
ab:02:8c:b6:7e:b2:7a:5f:1c:bd:30:a1:3d:a0:6b:94:d7:c9:
3d:08:b8:22:25:ee:67:0b:85:df:d5:d4:07:28:ba:40:4b:03:
9c:a5:fd:ca:b1:de:b8:39:de:71:07:3f:15:8a:e0:23:52:2b:
d8:49:18:35:2a:4a:48:bd:e2:8a:c3:73:2e:37:08:a4:af:04:
28:16:70:b1:97:2e:67:08:c6:35:06:a1:4d:c8:8c:48:0b:9e:
67:54:c5:49:f7:70:cc:22:7c:6d:a4:d2:4f:31:9e:45:11:e4:
e3:64:b6:98:6e:28:47:11:03:2a:d4:64:c0:35:6e:15:8f:d9:
60:80:7b:1a:a4:9c:10:54:05:fb:ff:67:40:14:4d:97:21:c7:
52:ad:b6:48:91:c9:a6:71:db:8e:57:54:c2:37:e3:26:c9:1f:
c7:ad:92:4c:8e:24:23:1c:fc:4c:83:6c:3f:b5:c3:5b:8b:28:
ba:3e:79:34:53:3a:cf:5b:80:58:d3:12:5f:6e:33:4e:6a:58:
5c:17:94:ca:4b:bb:09:48:95:1e:c4:a9:5f:ba:db:56:04:fa:
8a:99:84:93:cc:42:a9:ce:42:37:ca:36:3c:02:5d:ed:a6:4b:
b5:e7:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:45 2025 by rpki-client