Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: Sjy57TuYK26jn5vxS2Sc8vXsBBfrJ+wiR4ubV2LpTZA=
Subject key identifier: CD:E4:63:E6:AA:06:15:D2:AD:1C:70:5C:8D:8F:53:FC:A7:96:19:E7
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 0198D583A3F48587AF6578354ED73B208910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 0517
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: S+bdm5gPwkVUvDIF0Rl8+EtbM3jGBUAU6Pi77CgqpzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a3:f4:85:87:af:65:78:35:4e:d7:3b:20:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=cde463e6aa0615d2ad1c705c8d8f53fca79619e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:54:30:bb:96:66:75:3a:8b:98:a3:1a:1a:
a8:a3:c6:7b:4e:31:e7:8d:13:54:5b:fa:d3:31:40:
9e:63:77:52:70:84:63:c8:f1:67:38:d6:f2:47:b6:
5f:23:05:e5:88:5b:ff:09:79:c4:44:54:e1:9b:84:
35:12:66:05:43:b0:f5:98:88:35:3e:10:4f:83:7c:
7b:66:76:4f:13:5e:10:f3:66:2b:1f:59:38:9a:3b:
ef:9b:ca:cf:9c:fe:72:68:44:1a:d1:5f:89:bd:1c:
fc:6f:8f:96:9b:87:c5:7c:5d:fc:d0:23:58:ec:61:
bd:d6:09:d5:33:c8:86:11:65:16:c9:64:52:1c:ef:
77:97:6b:95:7b:2b:00:ed:b4:4b:1e:20:f7:5a:46:
80:de:12:be:04:44:9b:03:91:d7:b2:bd:76:3a:6e:
df:ba:40:ff:f0:9b:ac:5d:b8:68:28:c4:46:27:6f:
c0:26:63:48:31:10:a7:c9:51:40:4b:57:f2:a7:cf:
5b:e7:3e:28:03:78:2a:79:d6:4e:b9:7c:35:2a:7a:
f5:2c:0a:4e:ee:2b:3c:23:46:aa:6f:3e:06:44:29:
f9:04:81:6a:05:e7:90:65:65:cb:c4:b4:8d:ac:9f:
9d:d6:17:b5:d5:27:68:8d:1e:43:0c:3e:c5:a2:a1:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:63:E6:AA:06:15:D2:AD:1C:70:5C:8D:8F:53:FC:A7:96:19:E7
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:18:69:73:c6:87:75:82:bc:3c:cc:47:bf:7e:03:07:9b:18:
eb:eb:21:3a:29:19:48:07:3c:ad:7d:a3:4c:73:48:94:be:4b:
79:e8:1b:39:81:33:fb:b9:3e:b2:60:7e:11:2e:66:d6:df:63:
13:4c:54:56:71:27:00:c2:18:c9:8d:6d:16:4c:ea:f4:26:bd:
24:11:d2:11:8a:1f:a3:6b:76:4d:1c:22:2b:8a:5d:66:86:99:
f6:a3:29:fe:c5:ac:39:36:ef:af:ac:21:25:c7:7b:80:f9:fe:
a7:28:c6:af:38:3d:c5:f3:0b:50:39:6a:5d:5c:a6:11:a5:d7:
dc:37:d9:ff:27:e6:b5:bc:7e:cb:2e:4e:d4:96:15:17:03:89:
38:f7:e0:32:ba:71:cd:23:54:e0:b4:e4:f4:d5:ff:e7:e9:c8:
89:62:48:16:0c:e5:31:b4:c1:34:06:5e:aa:16:f7:7e:cd:28:
02:bd:43:10:97:83:80:41:8a:9f:20:96:43:00:52:67:15:ee:
71:e4:dd:2a:27:50:4d:54:a2:15:99:e0:e5:a5:a2:75:fc:7a:
f6:34:39:e2:e0:20:3b:be:e0:71:02:62:24:2f:6f:a5:0a:63:
b2:2a:66:3c:f1:a1:5a:90:3a:de:37:f4:d2:8b:b6:ae:7a:45:
30:06:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:26 2025 by rpki-client