Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: ikzTCNsFwbsraKcfjOjI0TsTrfST6Kh3XmN0eC57Xug=
Subject key identifier: F8:61:EF:BC:13:E4:DA:2E:61:15:45:F7:9B:9A:F9:F5:38:5C:08:A3
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0198D472E9A199E625E847B0AA438D173BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 02B7
Signing time: Sat 23 Aug 2025 01:02:37 +0000
Manifest this update: Sat 23 Aug 2025 01:02:37 +0000
Manifest next update: Sun 24 Aug 2025 01:02:37 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: tb4Fjssjz4fVSxLhFOIu6PA4CMheBSV1kedLpPolhkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e9:a1:99:e6:25:e8:47:b0:aa:43:8d:17:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Aug 23 01:02:37 2025 GMT
Not After : Aug 24 01:02:37 2025 GMT
Subject: CN=f861efbc13e4da2e611545f79b9af9f5385c08a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:2a:6a:39:6a:df:eb:fe:3d:e6:d7:00:86:
25:fc:c6:52:5d:9e:b5:6d:9d:d1:c3:d3:ca:2e:1d:
77:46:48:74:ca:21:e9:35:29:84:be:67:9c:f2:da:
a9:68:3c:67:78:1c:8f:dc:e2:5a:b2:de:90:2f:29:
98:30:45:14:be:17:fd:26:52:c4:4f:13:7b:46:97:
30:50:ea:35:27:60:5b:96:83:ec:46:3b:5d:74:08:
cb:20:05:fc:78:7d:0f:3f:5f:80:a9:87:69:01:fa:
bc:93:a9:d6:14:94:be:4a:0b:0f:c9:7e:e4:d3:ff:
13:3c:30:f5:0c:ac:ca:2c:f8:ee:4d:bb:f7:22:c9:
15:22:36:bb:5f:9b:02:d6:64:b8:db:79:f4:67:dc:
8f:07:3e:fd:a0:0e:e6:27:a5:c6:7b:1a:9b:86:c9:
5a:f2:7e:2a:36:13:7f:92:91:54:bb:80:a4:b5:88:
06:db:df:c6:3a:10:b8:eb:cc:fb:37:11:af:ec:2d:
95:81:e7:31:c5:04:d1:d3:52:35:73:a6:c9:8c:2a:
0b:a2:da:32:d3:33:0e:73:36:7d:37:ef:70:91:31:
41:90:e3:8c:03:a8:c9:da:ca:2c:c4:84:de:26:fd:
0c:e0:21:5a:43:8b:08:17:94:ab:b0:c4:67:15:a8:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:EF:BC:13:E4:DA:2E:61:15:45:F7:9B:9A:F9:F5:38:5C:08:A3
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:22:1a:6b:cb:87:19:dd:df:19:88:4f:cf:bb:9b:e5:15:
fb:04:8c:6c:c6:84:3e:2c:76:43:9c:0e:e3:5f:87:00:08:75:
b6:cf:c8:81:7c:05:26:57:48:68:d3:7f:6d:6d:be:42:19:97:
3d:ff:3c:64:f8:bf:00:04:cf:b5:dd:21:d1:c8:51:12:e1:e9:
88:c5:33:e3:6f:d6:69:57:31:db:f8:fd:0f:6e:84:eb:8e:27:
4e:2c:c6:42:ae:a2:f7:9b:f4:dc:bf:c5:d3:6d:e9:8a:6b:70:
d3:6d:7f:4f:5d:4b:56:78:a9:21:4d:20:f2:57:4e:de:15:b9:
28:b4:0d:db:2c:cc:28:66:2c:92:16:94:f1:67:70:6f:db:c7:
6a:8a:ad:13:c3:6f:5e:f5:47:f7:e4:fe:b9:cb:77:b8:7e:58:
f1:c9:d8:dc:2a:15:e3:c0:d0:9e:78:c1:83:e8:56:c7:15:7e:
49:b3:f3:83:45:49:05:a5:a6:0c:a6:dc:11:b9:cc:18:d1:7a:
e0:e7:8a:d3:64:76:71:0f:d3:02:05:15:4d:db:cf:29:08:df:
c7:4a:c6:62:48:22:b2:62:2f:96:47:c5:52:b0:f3:c2:4e:10:
d1:93:86:c3:b2:a6:21:ba:0c:d5:aa:5f:3f:b4:66:76:70:64:
dc:e5:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:42 2025 by rpki-client