Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: GT9BIsSEWX5pAThQScfxItT5VM7bnhXG0U9ILXX/f9E=
Subject key identifier: B0:F6:7B:5D:11:DC:8A:26:D5:43:17:A4:AB:5F:3F:7A:17:5A:70:19
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0198D47411AA7DF8A7311A4F60FA1FC155F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0846
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: ldqv6MhD0+Qnslt+fjs6lnYcsOS5c5cTIhhAsz5bn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:11:aa:7d:f8:a7:31:1a:4f:60:fa:1f:c1:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=b0f67b5d11dc8a26d54317a4ab5f3f7a175a7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:80:85:9a:c7:14:8c:9c:f2:fa:5a:ea:39:
10:af:99:22:a6:15:d0:10:9e:57:82:87:98:4a:9b:
93:4d:c0:39:ea:72:3e:c3:ed:e6:74:87:63:ff:00:
52:ee:82:5a:e9:b4:8e:44:54:01:92:f6:8d:6c:ac:
07:24:a6:b4:99:c7:ea:df:dc:ef:24:01:22:29:6d:
14:ca:55:f0:fc:73:9b:44:b3:63:2c:96:ea:95:30:
b8:a0:9d:01:4c:47:eb:19:6b:c1:5a:c2:c1:95:88:
de:f4:ce:6a:75:ea:86:08:b2:26:f7:df:d6:3c:22:
15:c7:30:c0:0c:37:d6:69:8a:9a:c1:d6:6c:22:00:
84:dd:25:31:60:66:10:ed:89:b5:69:5a:17:25:f3:
ea:a6:2a:76:1f:92:49:c8:8b:5d:ae:0c:cb:22:96:
a1:da:1b:96:86:62:be:85:f7:c2:46:1f:83:1f:68:
53:92:34:d0:12:5c:77:5e:d0:f7:44:92:60:0d:57:
28:a8:15:1d:95:7e:bd:e8:e7:6e:de:d9:e0:c5:c4:
c7:5f:79:2d:e4:9c:a8:a0:c9:f4:b0:c5:20:78:99:
81:b5:9d:01:34:2e:58:c3:fb:7f:d7:3f:01:14:80:
f4:5a:b6:48:be:06:70:78:13:8c:a5:81:86:d9:8d:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F6:7B:5D:11:DC:8A:26:D5:43:17:A4:AB:5F:3F:7A:17:5A:70:19
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ba:58:cb:f3:9c:ad:d2:1f:e0:fc:57:12:1e:a8:32:cc:a4:
dc:60:ce:35:59:84:6a:09:1a:e6:33:2e:49:b8:ff:5a:96:51:
b6:7b:29:85:b8:cc:46:3a:3f:fd:1c:d8:f5:20:e3:80:01:01:
62:a0:a3:ad:09:d5:d0:f5:cb:95:26:cb:a9:25:dd:7e:4e:79:
59:8e:21:19:82:c4:7e:e8:8b:52:b6:6f:e6:24:67:72:99:dc:
d2:48:3e:21:51:1d:80:69:f9:5c:f7:8a:14:33:4a:50:e6:a5:
84:f3:a5:60:4a:8a:bb:d5:5b:49:04:c5:f9:d7:45:98:6d:13:
79:e8:bb:b9:ba:3c:05:9f:2a:27:3a:fa:4b:c9:bf:fb:57:85:
2e:8c:ca:de:07:1e:8c:aa:31:2b:11:f9:51:4c:05:b4:85:60:
06:c2:24:e2:bf:06:e6:5f:10:65:c7:9f:43:30:4c:f6:65:f0:
b7:21:d3:ec:e2:7d:5f:2b:e9:e9:c9:d5:25:7a:5b:70:fe:e0:
9c:f8:0a:49:46:b4:54:63:29:07:e8:d6:1f:ef:cb:00:4b:6c:
4d:54:be:0a:f7:8d:7d:a4:63:46:07:15:44:b3:75:15:4a:d1:
d4:3c:ca:80:c9:b0:60:29:9b:91:c2:93:18:61:a0:a3:39:25:
8d:d7:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:33 2025 by rpki-client