Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: WmxceuWNBod7k/+m4ZWHgPGVfdfU7tJEmFBVdZs/iLY=
Subject key identifier: 84:1E:6E:7D:B0:C3:4F:A2:42:B5:1A:0B:CA:D5:E7:5D:DD:98:7A:9B
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0198D4DFD61328E653866A2932F21A184BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1589
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: nAmszalJS2JPWgHiFM1XYGvyW82zvjM3Ujgrm5wYPo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d6:13:28:e6:53:86:6a:29:32:f2:1a:18:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=841e6e7db0c34fa242b51a0bcad5e75ddd987a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:9e:5f:f5:81:94:8c:d7:23:f8:d3:e6:15:
ff:0a:35:44:f5:fe:b5:f6:02:89:65:6c:52:51:65:
06:66:bc:3a:2d:fd:f6:9f:ee:12:3c:05:55:79:a6:
ef:cd:a3:90:b9:b3:55:3e:04:b0:2f:c6:f2:3f:74:
0a:e9:2b:72:24:dc:da:ce:e7:47:f5:aa:14:98:9c:
9a:07:45:bc:bb:82:7f:7c:4e:61:b6:d4:b1:15:93:
41:77:8c:29:e0:0a:10:e7:df:04:d0:66:fe:b5:5a:
5f:57:0d:e5:0b:3c:12:c4:07:f0:c4:f1:63:0a:3b:
9b:76:c7:95:7f:52:d9:f6:39:99:34:25:22:0b:19:
1f:68:14:4f:54:f2:2c:2a:c9:17:48:2a:a0:d8:cd:
11:fc:a8:a9:79:b8:84:1f:15:bc:ee:be:e8:e1:fb:
23:44:e3:43:db:63:75:b8:53:c7:19:78:ef:1e:aa:
24:68:e6:dc:3d:b0:c5:43:55:0a:85:d5:ac:3d:38:
9e:11:41:bf:35:f9:4c:7e:2e:88:48:b8:04:08:8e:
07:ed:48:b1:39:44:02:bd:dc:77:26:c7:e2:b0:ce:
6c:83:d7:72:f4:6d:38:cf:e4:b0:87:a0:74:28:14:
3b:bc:a9:5d:37:0d:9d:db:7c:49:bd:64:ce:b3:61:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:6E:7D:B0:C3:4F:A2:42:B5:1A:0B:CA:D5:E7:5D:DD:98:7A:9B
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d3:02:3c:d4:47:90:50:ce:2b:49:fb:8c:70:25:44:92:62:
7a:67:32:1b:48:91:96:65:25:ca:1f:15:88:d1:d8:63:7c:bf:
0d:e6:7b:4f:7f:37:96:b1:37:c5:90:48:52:d2:d6:f7:25:2b:
2a:57:02:04:bc:df:ba:5c:ce:d5:ab:f2:d4:1b:3d:af:bb:86:
da:f6:33:ba:0f:71:11:d2:3b:1d:eb:41:57:d4:e1:6d:37:5a:
47:fb:9a:f2:a6:3b:8a:34:7b:be:4a:10:6c:c5:a1:b7:f6:dd:
c8:a0:5b:ef:4c:be:c4:0d:22:65:e5:d4:7f:2d:c2:e7:7e:63:
2b:cd:fd:40:b7:bd:87:d5:a3:e5:85:37:e0:b2:9d:f0:90:5b:
6a:f6:6e:5d:05:22:34:fc:2f:d3:06:bb:3b:52:9e:ab:c6:c3:
f3:5e:42:6b:60:93:f4:52:93:77:9d:5c:76:73:35:33:0c:de:
0d:90:72:b3:c4:2e:ab:bb:23:fa:9a:b3:49:9c:eb:0e:f5:f6:
4d:ac:82:b3:9a:36:e2:55:0f:43:c1:12:c6:d0:df:20:f2:6c:
ec:ea:01:d4:40:89:6f:74:d4:8e:5a:ab:d5:ea:d8:b1:a1:03:
a0:b7:bd:09:3d:a1:e0:82:3f:29:24:ba:db:e0:53:64:73:14:
70:43:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:32 2025 by rpki-client