Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 08BwFax0LoAHa1cNfKGepbyWYxnNbUAAC/OCwSCHDUg=
Subject key identifier: 34:FE:E4:C3:8B:05:5C:E5:B1:F9:F0:DD:4B:FF:AF:C5:EE:5A:21:5A
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0198D5BC1FD18319F5C86D9D861B83FF1935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0F8C
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 7uDUT1ZQLzXp/V4pQv8taLFdG4WowEtS9ALdBtPTwzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1f:d1:83:19:f5:c8:6d:9d:86:1b:83:ff:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=34fee4c38b055ce5b1f9f0dd4bffafc5ee5a215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:3f:99:28:aa:8f:af:d6:96:b3:73:eb:6b:
db:95:72:54:de:a4:a5:43:0f:0e:31:c9:30:ec:ef:
cc:d2:96:55:96:fb:de:5a:07:75:3d:da:87:af:25:
c7:b7:9a:1c:6c:56:c5:ec:7d:2e:41:e8:38:7f:eb:
80:79:02:00:f8:21:ed:40:16:9a:f4:4b:9a:09:ca:
99:2d:6c:47:4a:8a:7e:2c:97:b6:5a:69:03:5a:82:
d9:aa:49:78:61:30:ba:70:d0:0f:c1:7b:e6:86:e6:
06:f9:9c:35:ee:82:0e:c6:8e:31:5f:b7:f9:90:a4:
3a:9c:3a:3d:b3:b2:91:4d:8f:50:eb:89:54:3d:f2:
3e:f4:19:cc:55:90:00:97:50:74:bd:9a:f5:e8:fe:
66:18:55:68:c9:22:3e:a8:2d:7b:61:c7:37:f3:a7:
c5:37:58:17:ef:d8:39:ba:6f:93:2d:e0:0d:6e:70:
4d:ec:39:d2:8f:b7:00:df:a2:66:30:19:5a:b3:78:
74:69:7f:4a:fe:22:2e:14:6d:40:07:37:d1:93:fb:
6f:ea:69:fa:90:e6:4b:18:9c:01:c7:aa:1b:51:eb:
72:da:af:55:e3:96:0d:01:c2:cd:4a:65:5b:5f:5a:
7a:a3:f8:14:25:9b:9b:39:74:52:59:55:54:aa:b8:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:E4:C3:8B:05:5C:E5:B1:F9:F0:DD:4B:FF:AF:C5:EE:5A:21:5A
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e4:41:59:c5:db:89:62:e7:ae:a9:92:5c:29:83:86:5a:50:
18:07:bb:d8:4b:83:c5:14:dc:dd:63:34:90:5e:35:0b:b8:6c:
a3:5b:0b:ed:3f:55:29:77:3f:22:cc:c0:f1:dc:a7:3c:d4:c8:
96:a5:51:7d:71:4c:e3:24:8d:15:92:aa:eb:6b:7e:b6:a9:9a:
52:34:12:58:fc:61:4e:a0:53:8d:e4:e1:e3:6d:f2:1b:62:15:
c4:86:84:5d:cd:ea:aa:1b:15:cf:b4:37:e1:fa:f1:0c:ea:a3:
73:89:a6:be:04:a0:e5:9f:b2:12:84:dc:cd:fc:d7:b8:d1:ba:
cf:e8:de:3d:52:88:d7:01:05:19:72:92:f8:b9:c5:a1:98:96:
4e:d3:8c:d6:18:81:5f:ff:a6:5b:7c:65:30:bb:c6:f1:ac:c1:
56:76:81:10:a1:ca:d3:19:47:22:51:66:e1:40:d0:57:33:82:
ad:70:d8:a3:84:04:bc:0c:3a:a8:bf:59:5c:2e:d8:48:fa:20:
9e:b6:f8:0c:4a:16:ae:57:ad:9e:8c:07:23:13:83:c5:92:2c:
d4:e6:d1:de:4a:37:ac:5d:28:9f:fc:ed:8a:11:45:e8:cd:4c:
68:cb:27:65:90:e0:0e:1c:19:8b:02:fc:50:7f:aa:75:c0:64:
42:16:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:39 2025 by rpki-client