Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: ar7Gd4tJymrEiwdbRUZSDgsub3uTsA+Jj9Edc5qbIL4=
Subject key identifier: B9:74:74:C5:85:63:E3:41:05:06:A2:BD:3E:0D:36:70:E6:C7:24:56
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0198D4732804CE47E2C24DD8801C0F475C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 0354
Signing time: Sat 23 Aug 2025 01:02:53 +0000
Manifest this update: Sat 23 Aug 2025 01:02:53 +0000
Manifest next update: Sun 24 Aug 2025 01:02:53 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: gsLaaE96qb7rs073p1VyqYWNCiFNgTEumDvPqzoIbss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:28:04:ce:47:e2:c2:4d:d8:80:1c:0f:47:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Aug 23 01:02:53 2025 GMT
Not After : Aug 24 01:02:53 2025 GMT
Subject: CN=b97474c58563e3410506a2bd3e0d3670e6c72456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:6d:b4:0c:06:f1:1d:dc:08:06:3b:bf:ac:
1c:90:b9:82:03:7c:43:b4:b6:89:4e:e4:f9:37:a7:
7f:eb:af:30:ba:31:f9:4e:88:89:60:52:a7:ff:01:
f5:8e:01:a8:11:e2:43:3a:d8:4d:1c:f0:2c:f0:f8:
79:8d:15:ea:bc:55:fd:c4:cd:61:9d:25:96:8d:3c:
09:59:de:70:bb:d2:3d:c2:6f:03:03:45:0e:24:27:
d2:a2:95:ce:76:3b:02:7b:f1:b7:9a:41:14:18:b4:
8e:ae:84:ab:12:04:86:3c:5e:57:22:b8:96:bf:8b:
55:02:f5:97:66:ec:21:d4:12:e5:95:f4:c1:87:b7:
ca:34:86:db:a5:5c:02:59:29:09:65:54:36:d0:aa:
6c:a1:00:b6:a3:45:c3:58:dc:b7:0c:3a:ca:39:c1:
90:c2:14:3a:1b:e2:59:44:ca:30:a7:81:3f:05:ef:
13:e7:3e:e3:f2:85:23:47:8a:cc:0b:6c:24:3c:26:
63:ba:27:79:cd:60:eb:ea:2a:93:24:30:c0:29:5e:
a0:22:58:e6:17:b4:37:3c:70:6d:23:1a:e0:1b:4c:
6e:93:91:86:84:f5:35:5a:5b:d6:0d:4d:e0:f1:d1:
37:73:81:69:ef:80:72:70:e3:85:b4:ef:4c:cd:b8:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:74:C5:85:63:E3:41:05:06:A2:BD:3E:0D:36:70:E6:C7:24:56
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:48:66:2b:00:da:66:f5:62:df:aa:ec:6e:33:dd:94:74:fc:
c5:14:29:6d:87:73:bb:70:f9:b2:9b:dc:af:a3:8f:06:6f:4c:
7a:d8:83:0d:f3:8e:3c:44:64:85:06:d1:06:48:23:f5:bf:1e:
e2:99:b7:9c:ce:3b:49:c0:4e:ea:5e:1d:75:48:3b:4d:6a:af:
bb:c0:27:bf:3d:88:05:3b:96:c3:a8:e1:45:cd:1c:27:30:2a:
cf:83:7c:b7:40:eb:53:f5:24:dc:8a:be:ed:73:e3:e6:e3:95:
7f:e7:c0:23:de:6c:45:7e:1d:ea:f8:8a:8e:f0:88:44:4d:05:
2e:c2:0b:bb:e8:79:21:fd:c0:70:80:f0:29:95:03:31:a4:d5:
85:46:eb:99:09:8d:0d:e8:f3:65:38:d3:98:24:39:d0:33:5d:
e5:73:43:bd:80:c1:0b:c1:60:1b:8b:0a:66:ec:b5:6b:b9:c1:
75:dc:cd:9a:8e:48:68:fe:59:a3:ad:fc:c3:92:61:1a:24:0f:
e0:78:40:55:45:8f:01:07:87:eb:3e:1f:cf:8a:f2:3c:18:b0:
64:1a:2a:40:43:b7:a8:63:21:a3:02:60:ef:9d:45:9d:20:5a:
02:bb:8d:6b:52:3a:68:ca:e3:6d:19:b1:bf:d3:99:47:68:cc:
c8:95:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:47 2025 by rpki-client