Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: h1D0UodeiFbU1GYn1V9vTvPkKgp3NWvTzxLiCMgA9Fo=
Subject key identifier: 8F:D0:6C:7F:A8:DF:3C:80:85:FF:0B:2C:4D:71:C8:63:94:EB:57:A7
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 0198D4DFE86E8DA0252CED03D5F717EDA3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0550
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: MTx3prxbGdNaga9juQ3BdKhXcRs5lT9WVVnhyGe03cY=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e8:6e:8d:a0:25:2c:ed:03:d5:f7:17:ed:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=8fd06c7fa8df3c8085ff0b2c4d71c86394eb57a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:9c:48:7f:fc:ac:4c:23:0c:64:0a:a8:4f:
f7:20:28:4a:32:54:0a:e2:bf:4b:aa:07:32:98:af:
87:bc:ef:88:90:49:fe:c6:eb:c4:a0:4f:2b:06:d7:
71:b7:f2:e0:b8:63:bc:40:1d:a6:d0:0d:e5:b3:7b:
dc:bf:4f:2d:66:5b:7d:04:ad:33:90:5e:71:e7:0e:
ea:4a:a3:7b:e0:53:6a:0b:22:9a:92:30:53:46:91:
c1:f0:03:03:f2:8f:df:44:a6:1a:16:e8:8d:ce:a4:
34:2e:b6:cc:7c:1f:e0:b1:78:aa:bc:2d:74:b4:55:
ef:b4:1f:be:0a:3c:1e:d5:ce:17:37:b0:34:98:b3:
bc:09:ed:94:e3:a8:71:78:94:36:15:f6:da:bb:30:
27:29:db:03:ec:f7:1f:96:01:a7:2f:62:1a:4c:00:
14:b3:c3:59:81:a5:d2:b4:f6:9a:8c:64:d7:a5:72:
18:62:a5:82:c5:b1:d3:d8:25:28:74:17:22:5b:ee:
3a:6e:0f:96:1d:d9:dd:dc:05:31:b5:f0:2c:70:0e:
8f:00:18:ad:f5:8e:81:95:57:65:0f:82:c8:a2:2f:
e7:37:d7:e1:37:fd:ed:9b:37:1e:f4:e2:0f:fb:e4:
2d:c3:15:8c:bd:21:15:91:5f:ed:0e:a7:36:8d:07:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:6C:7F:A8:DF:3C:80:85:FF:0B:2C:4D:71:C8:63:94:EB:57:A7
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:fb:3b:5f:90:86:70:b0:d2:ed:2e:de:6c:f2:79:4d:5c:
0e:58:e6:f9:d0:8f:30:f5:2e:cc:02:e7:56:c5:e2:8e:07:de:
f7:83:0f:5a:c8:2a:28:64:4e:a8:8c:9a:61:20:57:73:85:49:
b6:db:71:d0:c9:34:f5:2f:a6:2c:40:07:5f:f6:ee:cd:e7:a5:
ec:05:fc:6b:4b:f3:55:c0:e1:6e:4e:94:0d:96:6c:4e:48:5c:
64:7f:26:25:cc:e3:2b:ea:cb:f7:cb:98:c1:8d:0d:51:c7:07:
1e:7f:87:a1:74:2a:97:06:4b:66:00:6e:0a:ab:e5:6b:d7:68:
27:9d:30:88:79:fb:70:44:44:5b:b4:bc:2c:2b:ce:70:1b:ae:
d7:cc:1a:be:13:cd:6c:fd:1f:03:34:5f:3f:ed:20:b9:7a:6a:
e5:33:8c:79:92:da:d2:7b:f2:b2:bd:ce:f9:47:36:74:7e:59:
60:36:4b:8c:df:12:ec:26:26:34:9f:76:24:ad:ce:ba:0c:74:
cc:52:8e:67:4f:22:f6:44:d2:d0:ae:75:15:61:73:5d:10:9c:
d0:93:1e:52:74:7b:61:43:54:21:b4:ae:80:2e:c6:5d:48:5f:
4a:73:f4:54:d2:23:62:f5:ad:d4:ca:cb:ca:7e:b2:bf:2a:f6:
54:44:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:20 2025 by rpki-client