Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: ajgpleb68khdT9a7ZcUzZsYHrvF2aDXsgVHG+BqgJXQ=
Subject key identifier: E6:7E:2D:21:AD:9F:9E:6C:24:DA:BA:B0:56:95:F9:34:1C:DA:C0:0A
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0198D73BD220FC516BC983E1C2241ADB2558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0CE6
Signing time: Sat 23 Aug 2025 14:01:18 +0000
Manifest this update: Sat 23 Aug 2025 14:01:18 +0000
Manifest next update: Sun 24 Aug 2025 14:01:18 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: TUB5vnqwIGL3G5uGPFWDWseIPZ1BHjYevOk7feJ+uKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d2:20:fc:51:6b:c9:83:e1:c2:24:1a:db:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Aug 23 14:01:18 2025 GMT
Not After : Aug 24 14:01:18 2025 GMT
Subject: CN=e67e2d21ad9f9e6c24dabab05695f9341cdac00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:3d:61:47:e3:3d:21:16:6f:78:39:54:81:
2d:37:6f:68:44:a3:49:ed:45:33:da:39:b5:fe:43:
07:b3:00:52:77:07:dd:b1:44:c9:27:c1:67:b1:f8:
c6:75:14:23:c5:15:7a:54:dc:b2:9b:e6:37:22:61:
1b:85:e5:12:05:b8:54:7c:d4:f9:34:6e:02:e9:05:
2c:25:48:80:98:6b:7e:39:e9:5b:56:71:7b:b1:8f:
c8:3e:84:77:b6:f1:8b:73:c8:fa:17:ee:74:c2:0c:
fe:00:56:74:04:e7:6e:cb:be:44:81:bc:bc:ea:65:
6a:55:33:f2:05:a4:00:1a:b3:4e:d5:c4:d5:46:b9:
94:69:f6:59:cc:c0:75:e5:c2:4f:f0:d4:ba:c2:56:
e4:ea:db:ba:55:40:c5:b0:da:37:88:d6:00:5a:11:
5f:48:fa:4d:8c:d1:a5:1f:36:90:34:12:11:af:fc:
d7:84:77:85:48:7a:56:66:b7:a9:6c:7b:c9:b4:76:
96:78:62:86:47:3b:3d:c3:37:bd:41:98:e2:22:47:
23:47:f1:80:02:75:5d:ac:0f:b1:60:8d:76:1d:74:
8e:cf:ee:e0:8d:b3:f2:84:60:fd:8b:95:55:d9:da:
a3:e5:0c:70:65:ad:ae:18:67:16:8a:54:57:09:8e:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7E:2D:21:AD:9F:9E:6C:24:DA:BA:B0:56:95:F9:34:1C:DA:C0:0A
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:e0:cd:72:69:ff:b8:71:ba:23:0b:8d:ff:5e:bc:75:89:
95:7f:af:ef:68:6e:0b:b6:62:4a:e2:ed:f6:a0:f3:84:ea:22:
61:74:8b:af:3c:c9:3f:f1:c8:ae:44:61:98:0e:22:2e:48:9c:
82:e5:47:02:71:05:28:dc:9b:88:de:27:8e:79:a9:94:76:b6:
52:c7:8a:ba:41:b0:f9:c3:52:6f:e7:c9:19:a2:86:da:ec:81:
eb:ad:ec:4d:b7:00:b3:54:26:19:ff:c2:24:3d:b0:ea:fd:d5:
b5:c2:86:e5:c3:eb:07:6a:10:df:a5:c2:a2:e9:30:22:c5:0e:
9e:72:95:0b:64:10:66:62:31:05:73:87:44:be:73:89:8c:51:
d6:04:2a:aa:84:dd:34:56:b5:61:eb:14:ff:f5:ce:a1:38:86:
03:14:f5:63:a7:83:fd:09:ab:6f:ed:ef:6e:4d:94:b9:d9:2d:
33:39:53:b0:47:19:e4:34:b2:7f:dc:d9:64:45:04:29:66:9b:
da:33:27:5c:6d:36:a7:27:bd:0b:b5:0c:0b:ce:c6:92:f4:03:
00:90:9e:50:7b:f4:a9:05:b5:3f:a2:5f:c0:b0:e3:e7:0e:63:
dd:ea:50:11:ea:58:d0:3e:31:6e:cf:e3:d8:51:d6:e9:00:96:
d4:1a:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:04 2025 by rpki-client