Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: A1FDAHxP/5JhCvZwhqSnDDe3V6jeNFEfSjj22z5nnQg=
Subject key identifier: DD:E3:04:A4:6C:02:B7:A1:71:88:20:91:E9:60:0D:0C:C7:D4:BE:F2
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 0198D73B5A31BCECA725C05A66CADD0F843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 05BC
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: jRJT4E7/fVq6cjUANLI59k5FHIII3CzFC4hezZe+eB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5a:31:bc:ec:a7:25:c0:5a:66:ca:dd:0f:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=dde304a46c02b7a171882091e9600d0cc7d4bef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:7f:e3:9d:fa:e9:3b:34:8f:d7:3d:00:22:
e8:0a:9d:8f:17:36:27:f3:87:d1:60:a3:4f:69:5d:
99:3a:4f:52:0a:c6:48:6b:c0:fb:91:97:3d:5d:c8:
87:a8:68:47:00:a9:59:8c:2b:7f:f5:da:1d:2e:f8:
41:32:aa:58:39:ef:93:84:6b:8a:fb:a1:98:3d:04:
18:94:21:dd:37:69:5c:0b:ad:47:a7:33:32:11:c8:
cf:ef:23:97:41:97:ae:41:a7:63:f4:da:9b:ee:e2:
ba:a6:ca:c9:c9:eb:ed:03:ac:57:a3:81:3a:a5:c5:
b8:16:74:74:7b:de:35:d5:a4:d4:1d:d7:b0:fa:26:
52:a6:3e:49:79:fc:4a:fe:2e:31:17:79:af:a9:c7:
12:cf:73:08:f1:d4:87:b3:72:06:73:2d:f3:e8:d3:
b6:9d:fe:d6:bf:a6:18:50:76:f9:b9:1b:00:c6:01:
33:34:83:63:34:8e:84:76:15:49:64:1f:22:cc:7e:
a8:c3:37:7f:f3:99:ed:66:65:a1:7f:6a:03:81:b7:
93:7e:29:fe:37:38:72:a2:47:3f:38:e4:22:93:88:
a5:8b:76:8d:15:79:94:27:9d:88:76:e6:07:6d:d1:
5e:72:f3:aa:2e:87:cf:6e:4a:4c:a8:18:35:c0:21:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:04:A4:6C:02:B7:A1:71:88:20:91:E9:60:0D:0C:C7:D4:BE:F2
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:24:aa:c1:6f:bd:7e:3d:2c:49:b3:7a:05:d5:91:7a:69:
40:62:a1:c1:2e:2d:a7:fe:fc:65:46:94:21:e8:fd:31:cb:11:
6b:e0:c2:e5:7c:56:0a:e6:47:15:e6:91:37:1e:e1:4d:58:f5:
d0:b3:00:4f:ba:8a:e0:9b:a4:00:48:50:fe:e1:6b:c3:4c:ee:
ec:63:bc:7e:cd:11:d2:94:ef:ca:b6:38:01:c9:e2:47:bf:5a:
50:ad:57:a0:37:b0:0a:53:bd:38:eb:52:77:93:74:2c:29:45:
06:24:42:7e:93:b3:c8:84:bc:00:f3:0b:80:6a:45:56:bb:88:
78:7e:38:4d:41:1e:33:c2:97:c5:e7:f4:48:d4:bd:88:57:d3:
f4:97:3b:09:35:43:09:77:f1:c3:47:e9:e5:25:64:c0:91:3c:
6d:cb:4e:80:5c:32:9f:22:62:ba:d5:c3:ba:50:0b:65:fb:1a:
3d:68:aa:0f:38:e0:85:c8:9a:f9:fb:b5:7e:d4:01:a0:b9:31:
d8:c3:e5:73:28:37:f6:34:d6:7a:f1:24:28:44:8d:f4:9e:fb:
56:ff:ef:e7:73:df:a8:6d:f0:54:b5:d5:a4:b7:b2:25:09:50:
63:a0:70:44:4a:e5:bf:44:f5:56:c8:20:13:6b:cd:94:5b:46:
ba:a0:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:40 2025 by rpki-client