Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: 6XPfgRsWex7eMJRsNPufDqnpeqRX3oiYRm+dGEjd7Q8=
Subject key identifier: 5C:B6:FB:D2:FD:E4:96:9E:7B:C6:6E:11:75:62:8D:A7:E0:AA:01:39
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 0198D65F730265BA1F4539C8CEB7B32144F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: zzp81ASqXYBpsdkFAJG+wS8mwHoSo5j8EIrwfmH7et4=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:73:02:65:ba:1f:45:39:c8:ce:b7:b3:21:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=5cb6fbd2fde4969e7bc66e1175628da7e0aa0139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:c9:31:e5:ab:74:84:fa:6d:53:06:4c:6e:
f0:48:88:fd:c5:7c:35:d5:f4:0d:fb:7f:0c:44:5e:
87:7d:de:e1:e0:7b:67:98:dd:1e:15:be:65:ed:15:
da:b0:d5:e2:ef:53:bd:01:43:28:bd:48:8c:01:82:
40:00:8e:d1:e3:3f:dc:6b:83:ee:8e:98:41:5c:85:
bd:c2:03:e2:0e:a0:d7:2d:79:62:21:08:3e:51:3c:
08:5a:ab:11:f1:67:d9:08:63:17:15:84:1b:ee:c4:
fd:a4:53:b2:8b:06:2e:da:33:be:f2:ee:1b:90:7d:
7e:93:cd:f2:d4:e6:d4:1f:90:59:ba:74:04:cd:66:
f9:fa:8b:84:f8:97:0b:e7:28:e3:10:0a:c4:56:6d:
ec:5b:3f:95:07:a8:a8:f3:b4:a5:69:dd:14:33:6f:
a9:15:30:7b:29:3b:7b:cf:1c:3f:7b:9e:37:99:2a:
68:1b:4f:5d:6d:3e:f1:04:04:f0:eb:de:5b:64:30:
a2:cc:84:93:f4:f8:bf:bf:e9:b7:26:36:07:a3:ea:
77:cc:7d:9e:c6:d6:9e:76:03:6a:43:93:05:45:27:
03:53:d6:71:92:4c:6c:24:60:c9:1e:8f:e7:5d:f5:
93:15:99:12:e1:56:93:19:93:58:de:aa:c1:69:a1:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:FB:D2:FD:E4:96:9E:7B:C6:6E:11:75:62:8D:A7:E0:AA:01:39
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:1a:a1:e8:5b:88:92:da:81:a3:6c:9f:ce:40:8c:da:8c:
3c:6b:8b:ef:aa:0c:1f:6d:a2:9d:75:57:15:f2:df:93:5b:df:
d9:50:c0:62:aa:5d:9a:0a:1c:ae:91:22:7e:94:21:7f:b9:e1:
f3:af:da:70:b6:2b:e3:02:b6:c2:46:1a:f7:ce:3a:54:f7:27:
67:b6:46:98:36:ab:d2:19:5d:ea:3e:5f:ca:e0:b5:17:79:db:
93:3c:07:15:53:99:1d:8e:5c:49:cc:4d:a6:8c:38:12:70:c4:
05:33:98:bf:f7:d7:87:3d:0a:dd:4f:35:d4:45:53:52:f0:df:
b0:96:82:fa:3e:9e:f4:a7:bb:a1:13:29:dd:5e:03:d4:68:bc:
69:79:c1:ba:0d:4f:64:eb:cc:00:05:b0:a8:47:88:a3:5d:73:
33:fc:ce:94:12:24:19:98:3c:40:e0:4b:ce:2f:75:eb:9f:2e:
76:3c:44:31:11:ad:ba:4d:dc:70:01:4d:4e:63:13:ba:3a:89:
0b:d1:20:45:ce:09:94:77:c5:b8:0e:2f:62:0d:10:57:b3:14:
29:c1:19:f3:bf:83:72:99:6c:1c:d3:ca:c0:01:8d:bb:56:97:
e3:b0:f1:63:da:d9:29:2b:ea:f7:87:33:db:ab:29:7e:27:3a:
c6:ea:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:14 2025 by rpki-client