Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: 9aTcTAafvLYRXA56CECV3b47hKa4QWghS11xHtRLsI0=
Subject key identifier: 58:CE:C3:C0:13:9F:8D:C4:92:42:42:81:0E:4D:9C:92:CC:ED:D8:F7
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0198D8517ADC48B11AB8CF0E648B265DEE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0D0D
Signing time: Sat 23 Aug 2025 19:04:35 +0000
Manifest this update: Sat 23 Aug 2025 19:04:35 +0000
Manifest next update: Sun 24 Aug 2025 19:04:35 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: F/9BuJpZLNJbSjEXPi1Qw82pMqJBG2HqRod9gfVjeqg=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:7a:dc:48:b1:1a:b8:cf:0e:64:8b:26:5d:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Aug 23 19:04:35 2025 GMT
Not After : Aug 24 19:04:35 2025 GMT
Subject: CN=58cec3c0139f8dc4924242810e4d9c92ccedd8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:5d:3f:7e:d8:ce:c7:1c:57:44:5b:b4:c1:
2f:87:b2:05:51:54:0b:ab:94:86:37:39:6c:18:46:
65:b7:af:ba:59:ba:4f:eb:f8:90:0d:1b:33:e3:b7:
35:14:33:81:40:e6:b1:12:2d:48:f1:bb:19:39:2a:
b0:01:d5:d7:cb:e9:3e:50:36:f2:91:bc:cc:1c:9e:
97:f2:36:c7:a3:d4:31:c1:17:7e:51:54:8f:78:40:
63:4e:be:53:24:06:e3:b9:52:01:e8:a4:cf:21:51:
c6:bc:8d:e4:cb:52:14:32:8e:00:62:f8:32:6d:ec:
61:21:8d:80:b7:99:31:0c:6b:5d:1e:88:e1:a7:c6:
ab:b4:65:fa:88:ea:b0:ed:95:05:84:23:05:95:bd:
97:70:7a:e5:3e:b7:13:ff:7e:34:d4:3c:53:f3:f7:
cf:f2:e0:f3:cc:53:b8:af:43:69:5a:68:b2:a3:04:
fd:1d:d5:72:87:8e:96:41:04:5e:d0:24:2e:80:08:
6f:d3:9c:c7:7e:f8:15:dc:32:e3:b8:d5:b3:c5:c2:
4e:e5:d4:0f:63:f1:a8:4a:c2:92:0a:ad:bb:4a:f3:
b6:30:23:6e:d6:1b:c9:b5:75:5e:13:57:5e:5f:e3:
9d:72:81:0a:cc:40:26:5d:40:45:94:9d:2a:32:ac:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:C3:C0:13:9F:8D:C4:92:42:42:81:0E:4D:9C:92:CC:ED:D8:F7
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:91:8c:4b:ee:3d:47:fd:d1:64:8c:2a:fe:22:4e:ba:4d:98:
59:c4:7e:c2:f2:b0:ee:f8:28:ee:e1:9c:b0:39:9f:a0:3f:ce:
bb:f2:cc:89:99:4d:89:a7:c7:b7:4e:f7:3c:4e:4b:25:4f:12:
e8:06:9e:9b:ea:87:22:b7:f3:cd:b5:81:e4:c6:5a:49:ba:e9:
2a:b3:1b:e0:41:38:f3:69:c5:09:a4:02:60:63:c4:7e:69:ba:
bf:31:5d:34:ff:47:a3:44:8d:d0:a5:36:ef:17:58:eb:f5:05:
46:db:ee:50:a1:6d:a0:76:11:c2:68:0c:54:60:b9:ba:a4:92:
80:71:23:9a:91:bf:db:f9:1c:7d:cd:a2:dd:8e:9a:e3:88:2f:
24:c8:65:84:ac:41:2e:65:18:d2:da:93:ed:82:b9:6c:06:6f:
b1:39:45:81:de:7d:64:67:19:2a:86:0f:51:5c:d1:93:53:d3:
3c:c3:24:e4:68:43:a2:9e:93:fe:97:3f:86:d6:12:f6:a2:af:
be:69:46:a8:24:6b:cf:8d:48:2f:11:3e:1e:3b:c5:18:65:d3:
f8:3b:38:5b:97:ab:5d:8a:6b:97:67:95:59:2c:37:96:ed:3b:
e9:9f:0a:29:ad:0d:b2:9a:6e:19:69:5d:14:88:94:63:11:d2:
83:44:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:15 2025 by rpki-client