Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: L/wnBgrtKTbpK/l1G8oSc6nJ3BAV50RTPV9Bx0QPNKs=
Subject key identifier: 90:8D:1A:E6:C5:E3:1C:A8:44:58:AD:F4:7E:BF:AC:D6:7A:51:7A:3F
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 0197B88F63EBADE64F135A00B2461EAB3DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0878
Signing time: Sat 28 Jun 2025 22:01:34 +0000
Manifest this update: Sat 28 Jun 2025 22:01:34 +0000
Manifest next update: Sun 29 Jun 2025 22:01:34 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: hFwZM9NLawLf2SMEtbkKqzDbjizpCRpYmeuK21j+cMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:63:eb:ad:e6:4f:13:5a:00:b2:46:1e:ab:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jun 28 22:01:34 2025 GMT
Not After : Jun 29 22:01:34 2025 GMT
Subject: CN=908d1ae6c5e31ca84458adf47ebfacd67a517a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:fd:9c:bd:d9:79:e3:83:e0:51:fb:bd:41:
2f:d4:64:44:44:1e:e4:9c:ae:b9:ca:d7:cd:2b:48:
0c:6b:dd:0b:7e:88:44:9d:24:d6:37:b5:9a:4a:02:
67:a9:df:7d:3a:09:97:14:6d:af:49:2f:69:af:ec:
42:ab:9c:7f:3d:e3:9b:c9:9b:fe:cb:0f:94:41:2a:
5a:92:a6:33:2a:fd:61:02:15:16:e1:0f:f2:e9:80:
f2:9a:4d:a9:c3:7e:44:82:6d:3d:92:f4:6e:6b:11:
1a:4a:d2:ae:49:65:1d:4f:b2:5b:c5:10:a8:d5:bc:
c3:c0:a1:ad:38:44:20:60:f2:8e:d2:aa:f3:05:3a:
1c:7a:be:b7:a8:4b:9d:26:5a:df:47:0d:d7:60:15:
d8:33:44:f8:f5:4c:84:d0:f2:2c:89:68:90:68:1f:
bc:81:06:d0:65:69:cd:cb:5f:24:b8:90:51:bf:38:
1a:4b:c5:14:c4:16:73:7b:47:45:ca:b1:16:e8:79:
22:34:3c:3a:09:26:a6:cd:3b:c5:19:b4:72:22:d8:
a2:61:ae:f2:fb:7b:17:0f:fe:25:9a:e5:d0:ae:c8:
13:be:fd:22:28:b1:82:09:bf:4e:0f:5d:71:6a:87:
0a:31:2e:79:f8:01:e6:10:03:a9:f8:5a:92:28:21:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:1A:E6:C5:E3:1C:A8:44:58:AD:F4:7E:BF:AC:D6:7A:51:7A:3F
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:77:79:fc:94:41:91:dc:b4:29:20:ef:24:b5:11:31:da:97:
9d:fd:f0:e0:81:fc:2a:95:bf:ed:a2:80:e1:cb:ad:89:e8:62:
34:4a:45:57:10:de:76:5f:1c:e8:17:14:3f:ef:22:09:04:d7:
41:98:15:4b:b5:1f:3c:0f:c5:a9:e7:31:69:dc:d9:78:55:ff:
6c:91:9f:48:73:0d:88:1f:4a:00:a4:ae:db:9b:a5:f0:fb:6b:
ef:45:00:a9:cb:ae:10:2d:0d:38:90:60:9d:a8:f0:f8:5c:67:
73:ec:4d:69:fa:69:e9:38:0a:a2:5f:a1:29:6d:d7:94:f9:89:
84:e1:ae:40:b1:ed:22:53:3b:d7:ec:13:fc:25:a1:d6:2b:f5:
58:8f:09:a9:68:ce:af:b4:a8:c0:cc:45:a3:a3:e2:8f:d0:bf:
6b:33:36:5a:5d:9d:36:d7:9d:7a:2d:87:84:17:da:5c:5f:0b:
b7:98:23:bd:89:11:a7:8d:c9:b4:c1:82:1a:96:6a:ee:b3:79:
48:2f:02:5c:cf:83:93:a5:cd:7f:61:53:bf:bc:ef:06:55:0f:
50:9c:1b:6a:0b:29:9a:ca:7e:71:27:eb:5a:ca:21:59:65:e9:
93:f5:fb:d7:4a:04:e0:0d:ff:bf:5c:12:ec:2f:e3:77:e3:27:
eb:f7:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:09 2025 by rpki-client