Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: 3cYr7hmETWA+83hE2YX9buGPor9OGwOUT00dH4TPqjw=
Subject key identifier: 50:1A:20:9E:E9:BA:02:E3:F2:BB:35:8E:57:4C:01:9A:42:41:73:31
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 0198D5BC0E08EF834B3963891F9360090C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0DFB
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: MNEWfXis48pFjibU1b9eWRjWlFtMmZCDJ4AG3shrRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0e:08:ef:83:4b:39:63:89:1f:93:60:09:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=501a209ee9ba02e3f2bb358e574c019a42417331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:c0:ae:75:0f:01:f8:c5:df:c3:69:06:e6:
ae:4c:71:cf:ed:61:1f:75:58:48:2e:19:37:b5:8f:
14:83:0e:f8:02:12:83:40:51:ea:18:f9:4f:f2:f2:
7d:fd:85:8c:b5:d2:7d:81:9e:70:56:18:99:28:25:
b3:b2:72:e3:d1:16:d7:9b:1c:d4:13:ea:b6:b1:38:
dd:cf:26:29:6a:ed:53:3f:9d:61:e9:be:6d:0e:76:
dd:78:22:e4:86:78:46:c1:09:5a:51:f1:0b:74:dd:
d8:cf:8c:16:b4:8f:30:bb:9d:93:36:17:6f:1b:52:
79:42:36:b2:78:c0:b3:da:19:31:85:16:06:b2:55:
c6:de:8d:29:51:31:93:05:6b:86:5a:26:e3:0d:dc:
52:19:09:15:d2:cc:f6:e7:95:ce:eb:7e:14:9c:26:
49:d4:fe:8c:b2:4c:b0:4c:e3:2c:f0:93:a2:5e:b2:
f1:f3:e2:7e:61:68:3c:eb:ac:b1:f4:f7:0d:ba:b5:
04:89:21:cc:5c:d1:ab:cb:28:2e:58:07:9f:93:1a:
88:0b:81:42:fd:b2:57:6f:97:17:c5:34:d0:3e:bc:
ce:43:da:17:52:47:5e:cc:34:67:de:c9:3b:56:c2:
d5:ed:b9:53:3e:b8:8f:94:94:99:6d:68:5e:c4:e2:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:20:9E:E9:BA:02:E3:F2:BB:35:8E:57:4C:01:9A:42:41:73:31
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ad:5f:e5:f2:2b:45:4f:ce:0a:0f:f0:c8:77:c9:83:7a:b9:
62:95:eb:60:54:2d:53:46:24:09:8b:48:f4:7e:e1:b9:86:a5:
fc:6d:99:be:20:e7:04:04:47:2c:6d:1c:d0:c2:00:75:0f:7b:
c7:13:8b:14:1f:ac:4b:19:29:03:48:c1:f8:2e:aa:2d:f6:4b:
1c:18:b7:49:44:cf:a1:64:aa:34:05:ab:1b:d7:5d:dc:bf:eb:
57:3a:18:ca:70:1a:7d:5f:74:ef:25:46:0e:d5:34:74:47:7b:
5c:45:ed:d2:3c:85:a9:62:dc:e3:d9:9c:f2:4e:5d:1a:43:b3:
8d:9e:0c:50:83:53:84:82:34:fb:e5:7f:c8:5e:e9:2f:66:cd:
67:ad:c3:3d:99:57:bb:62:98:ee:04:1a:c4:6e:3f:3f:f0:3f:
e8:6e:2f:52:5c:84:4d:e5:60:dd:f2:ec:e3:fb:75:dc:d7:78:
d0:81:61:c7:a5:50:85:db:2d:55:98:25:0b:2e:cb:b7:c7:af:
45:f6:93:15:d8:90:43:91:e2:20:46:48:c4:36:48:fa:21:49:
ab:d1:70:f2:e4:b1:85:65:f4:d1:9c:dc:4a:4b:85:de:fb:65:
e1:0e:01:34:c3:17:7f:01:78:30:df:28:20:73:e1:84:82:73:
b3:4c:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:05 2025 by rpki-client