Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: 5VksPX1ytyWl3bulr5HuJa+NsrlYZApxCNdAPNE8T3g=
Subject key identifier: 87:43:8F:5E:3F:29:ED:EE:6D:5D:54:03:2C:D6:35:D2:2F:44:21:84
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 0198D5BC1F66FF1AC024A5EE3669858C5B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: gAGqEbpmnwJkpr2Wo7U1OdxV7dLfRsYsFurpA14+Q/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1f:66:ff:1a:c0:24:a5:ee:36:69:85:8c:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=87438f5e3f29edee6d5d54032cd635d22f442184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:7c:29:f6:02:3b:01:49:e5:69:28:a5:b6:
96:d4:6a:4b:0e:bd:1a:fb:88:2a:a1:b1:98:35:e3:
c0:b0:42:fb:af:de:f6:58:48:9e:cb:2b:ed:be:1d:
2f:96:75:c1:91:e1:98:5c:f7:d9:6f:15:ad:79:09:
5c:67:02:5f:62:a5:f0:e6:24:14:4d:71:3c:16:d2:
3b:0e:65:ca:ac:47:96:3b:d0:3a:7a:af:35:cd:e3:
63:e5:e3:0d:f4:40:bf:69:10:04:6e:81:12:36:c9:
34:dc:55:75:15:45:a2:32:2a:05:75:6e:79:4e:6a:
09:16:67:f7:3f:d6:ce:02:5b:6f:20:9b:c6:b7:a4:
7b:f8:38:c3:8d:b4:47:4a:e4:cb:28:0c:c2:05:29:
2c:58:d3:d9:b3:93:fb:d9:26:77:87:4d:3e:6b:c6:
bc:ff:aa:f9:7b:39:e8:ed:c7:85:a5:18:60:9b:71:
9c:a7:f6:5a:cf:a4:0e:7e:09:0f:d5:7a:89:25:c6:
d5:f0:41:29:1e:1e:60:ba:0e:7a:4b:2b:4e:5c:d1:
18:10:36:de:01:8e:05:17:66:84:17:dd:cd:d7:9a:
c4:d3:59:1a:82:39:67:f5:fa:16:41:5d:71:71:ab:
aa:61:a7:73:2a:26:0c:61:34:66:0c:3a:38:c9:b1:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:8F:5E:3F:29:ED:EE:6D:5D:54:03:2C:D6:35:D2:2F:44:21:84
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:32:18:7d:56:10:ca:ac:8c:53:cd:26:2e:ad:8f:0c:a5:e1:
28:4e:2a:74:66:15:6a:27:d0:16:c0:10:09:73:e3:ae:f0:ae:
17:c2:de:f5:2a:2d:6f:79:1f:09:d6:b7:cb:c1:cd:62:b2:ec:
20:b3:cf:a6:b6:2c:5a:1d:ca:8b:d3:65:41:35:2b:ae:23:8a:
21:ed:42:29:7b:3b:05:83:ed:09:a5:c6:46:a3:40:3d:a4:89:
f8:ed:df:81:9e:d0:7b:0f:fe:78:8c:ce:60:c5:cf:89:c4:d3:
2b:cb:ca:36:c6:8a:4c:5e:b7:fd:8a:53:50:7f:51:db:38:b0:
6b:d5:ff:bb:a1:b9:e6:e2:d8:36:1e:44:e6:fd:3c:b7:9c:05:
87:81:33:6e:1e:b4:22:07:ea:88:32:05:4b:66:21:26:d7:12:
d9:b6:a8:34:45:96:bd:04:f4:c9:87:68:3b:16:8f:32:5b:89:
3e:39:f3:39:46:2d:da:1f:8f:4a:c7:e8:ff:99:06:f0:c8:f8:
28:fa:69:3d:0d:30:61:39:ae:6c:38:34:b1:0d:af:e6:1f:d1:
eb:41:55:56:70:2a:13:67:f8:2d:2c:b8:d0:b1:2e:63:c0:5c:
95:bd:14:4f:72:77:8a:5f:c7:0d:88:66:51:8c:85:ce:b7:24:
48:f6:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:01 2025 by rpki-client