Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: qGa5n2QEz628tCBe7NAtChe1c5QkGRHKJUeJnlAqNHA=
Subject key identifier: AD:2A:25:7C:4E:CF:84:69:9C:10:4E:0A:59:0D:48:F4:8A:B8:5A:EB
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 0198D4A8487A343A6542EADA18CE96F9BD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: 0hEQWtCR6giC8jFmohyRoIFFBnv0h9fPLrsuKIdh4JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:48:7a:34:3a:65:42:ea:da:18:ce:96:f9:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=ad2a257c4ecf84699c104e0a590d48f48ab85aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:cd:87:98:42:c7:24:63:e3:3d:f9:22:54:
df:96:f8:0b:b6:cc:ff:76:cb:b6:66:3a:3e:9b:8e:
2b:cc:58:7f:e7:26:41:23:0f:55:30:df:44:1a:e1:
d7:11:11:4f:01:c1:f3:bf:fc:54:f7:91:8c:e4:5b:
12:07:c3:53:ac:f2:9c:40:bb:14:52:cb:91:f7:78:
f1:8f:a1:f4:94:b3:48:1f:f3:7e:0a:6d:dd:58:64:
97:0e:f1:94:ed:16:0a:53:8a:09:be:e8:18:cc:a7:
07:b0:61:0e:ae:f1:d7:b3:7f:bf:24:9f:09:b5:5f:
cf:a9:32:54:c6:24:f8:fb:18:50:d0:f0:22:3e:d9:
04:e6:ee:8d:28:3b:3a:0f:dd:ed:06:62:02:02:22:
1e:d7:e0:9f:9d:df:1e:6d:18:8c:2e:52:fc:a2:fb:
96:f4:84:b8:a1:c5:89:3a:2b:b3:a7:f6:90:0e:16:
a9:28:cb:fd:70:1e:6e:cc:d0:15:db:6b:15:cc:80:
1d:95:c0:07:e9:1f:cf:c8:77:68:93:00:b5:f9:ca:
f2:11:ea:0b:e2:60:93:f4:89:15:03:65:cd:1e:c3:
03:68:e0:d3:bc:21:3b:9e:a3:60:41:d7:75:36:14:
51:31:7a:c8:fe:42:27:12:f3:86:b5:be:2c:21:19:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:25:7C:4E:CF:84:69:9C:10:4E:0A:59:0D:48:F4:8A:B8:5A:EB
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9c:8d:1d:55:82:88:2a:87:75:69:93:5f:58:0d:ed:0b:52:
0d:b4:b1:05:78:a6:7b:2c:ad:b4:fc:fb:44:7e:4b:7a:03:4f:
84:e6:29:be:d4:d9:50:56:9a:b6:1e:82:d6:43:b3:83:4d:8e:
63:e7:87:8e:fc:4c:b8:e1:51:20:1f:cf:3c:06:c3:5c:95:ad:
9f:16:e5:8b:f1:e1:be:82:0f:46:21:c5:b8:4d:40:c2:df:03:
c9:f1:4e:d6:b9:f8:a9:6f:74:82:a2:5b:c5:04:d1:03:12:8c:
81:34:dc:fd:56:2e:b3:05:d4:04:03:44:e6:c9:be:b5:c3:42:
af:f9:2e:35:31:ab:e0:1b:41:e1:a8:9a:88:65:d3:fb:e9:71:
aa:82:ad:69:b8:d7:bd:0e:37:cd:55:76:f9:fb:30:fd:46:ec:
cc:20:3f:35:4c:a3:b7:1b:28:c1:04:20:a3:28:8d:41:0e:4d:
f3:a6:e2:03:7d:b4:30:02:76:e0:dd:d8:59:72:0c:6d:0a:29:
d5:f4:55:de:58:1b:56:f4:77:6d:21:bd:ca:30:b7:e4:e2:fd:
ba:76:70:95:76:cc:41:cf:40:b0:05:1d:88:df:c5:c3:55:78:
15:05:c3:c0:b6:a3:d8:47:1d:4a:ba:c0:ec:14:ee:48:90:9b:
10:48:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:49 2025 by rpki-client