Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: D+/6QHhhjcHewQH1TLq1LJrHV8Eg9i9nya2jqiOxL+w=
Subject key identifier: 3A:EF:E7:6C:DB:08:13:BA:11:37:D1:F1:7F:EE:E6:16:66:E5:09:78
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 0198D515E62FACB5A4AD1041CE48340B81CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0ECF
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: dYgZYHBgdi81DPtfHG0+3OWasapJyv23QKr6zfwAu9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e6:2f:ac:b5:a4:ad:10:41:ce:48:34:0b:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=3aefe76cdb0813ba1137d1f17feee61666e50978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:6f:6f:80:f4:95:fd:69:ee:12:57:50:9e:
3d:02:c5:5e:e9:20:44:dd:d3:a5:d8:f8:a6:38:36:
b3:d0:5f:67:f6:e1:34:7b:db:ee:ed:43:7f:0e:2a:
33:64:81:38:f6:65:f0:48:a5:c6:73:91:22:63:cb:
85:34:18:fd:c3:16:27:d8:cc:8d:2b:97:69:2c:14:
15:11:4d:91:a0:80:49:2e:a7:9d:ed:01:5a:72:e2:
b0:71:f5:08:dc:3c:9d:05:0d:2d:c8:a0:46:f4:65:
48:2a:e0:9e:33:16:39:49:4c:c8:70:ee:22:a1:70:
0f:9b:84:74:cb:81:32:20:97:5a:65:42:ee:58:1e:
6f:30:d7:54:14:03:fa:bb:5b:d1:81:a3:f5:ca:93:
5f:bd:1c:95:42:c1:e3:09:d4:03:20:b8:66:87:b0:
f9:ad:74:67:f8:3a:20:37:7a:73:d2:4b:c0:ed:3a:
26:d7:1f:48:2d:ce:fb:42:ba:57:28:cb:c4:24:ed:
13:76:ee:3c:f8:96:78:a5:60:67:a1:f2:33:4a:b6:
6c:c9:26:78:ea:62:3e:8f:31:07:ef:70:c3:7a:fb:
fd:43:5e:8d:e8:75:50:7e:8c:76:b0:e1:25:11:c3:
61:dc:b7:9a:ea:c2:91:bc:13:30:24:24:32:97:f1:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:E7:6C:DB:08:13:BA:11:37:D1:F1:7F:EE:E6:16:66:E5:09:78
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:b5:81:e8:48:c7:54:a0:46:8b:16:5c:52:89:d3:4c:f4:
16:b6:a2:40:04:cd:80:de:0d:02:7e:63:f9:89:d7:62:dc:9b:
7f:ef:e6:dc:32:be:98:b6:20:8c:d9:0e:7f:6b:96:0b:81:4f:
c5:2d:34:b4:a3:89:17:0d:14:80:c2:a8:b0:9f:c8:e2:98:8e:
36:23:5d:1c:47:7a:35:d6:21:22:49:55:5b:fd:ef:ea:9e:61:
14:65:ad:d0:dc:e5:51:12:c8:b0:0f:b7:92:43:4b:42:5d:27:
82:70:e5:e0:18:86:59:ce:65:53:9f:cc:d6:c2:7a:9b:a5:cb:
7b:e8:68:24:69:0b:c0:af:8a:11:fd:b5:29:e4:7b:0c:3a:b6:
f2:68:50:0a:a6:55:a4:87:c0:55:73:25:70:71:9d:c1:44:17:
f1:6f:3c:9e:69:0e:43:0b:e1:c3:84:94:fc:e1:44:97:1f:2f:
a1:5a:f5:b0:32:ea:2b:0d:10:88:bb:0e:81:24:68:6d:1b:8e:
e7:a0:08:1b:2f:0d:a5:ce:19:3b:22:57:c2:1f:7d:44:6e:cb:
b4:be:e7:0b:0d:4a:ad:0c:bc:6e:84:b5:a4:f3:3f:f1:ea:2c:
52:65:bb:63:2b:fe:b2:ca:24:c1:ae:cd:36:f0:ef:ea:f2:f4:
b3:e0:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:52 2025 by rpki-client