Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: Fe+WzHYUthEAh9Bou6opOnfFfgwQ9f2NGA9WVMcFW+M=
Subject key identifier: FE:D0:D7:89:2B:91:E1:87:B8:26:4A:DD:F9:CB:F2:41:AF:7B:BD:13
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 0198D4E04B743DCCE859F4CD15921466D0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 10B9
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: HQhxk34MqrJ1e5DGKR7W87RwaIBRKaTvd25mxbHsKe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4b:74:3d:cc:e8:59:f4:cd:15:92:14:66:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=fed0d7892b91e187b8264addf9cbf241af7bbd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:c8:19:f4:e4:5c:75:70:49:9c:e6:63:6b:
7c:52:ac:24:44:76:9a:3f:50:22:d5:de:99:36:32:
1a:44:67:ea:92:5d:8d:62:46:24:13:2a:77:bd:79:
a2:e3:05:55:75:a9:7b:96:74:61:71:dc:14:c9:de:
67:d9:28:e8:0b:5f:08:1c:da:b8:3c:05:2c:6e:39:
1a:e8:b2:e4:aa:77:33:61:73:0b:d4:b0:7e:01:a5:
4a:c8:48:b9:2c:bd:6f:f2:12:7a:95:07:84:b3:7a:
55:d1:8d:6e:23:28:a5:7e:21:78:ad:86:a8:55:c4:
e7:87:2b:ff:69:fc:12:b2:f2:a8:46:39:e1:e6:d9:
c9:92:70:55:97:5f:27:6d:43:31:7a:df:1a:37:f8:
65:4b:17:06:23:82:5c:77:07:1b:16:f3:96:15:a3:
a6:00:15:86:ca:ac:ff:4b:a2:15:c4:21:f7:64:fb:
ae:ae:e5:ec:48:c5:7b:a2:9c:d5:f6:70:8b:e4:8b:
a9:18:54:18:21:2c:2c:03:ec:00:f2:65:4c:f5:1c:
08:3e:db:d4:66:99:ec:ae:b9:69:e6:eb:91:bc:4b:
3e:b7:8f:c1:cb:ef:dd:60:96:02:80:ed:e7:be:5d:
3b:5d:4f:52:b3:6e:9c:7b:93:1d:c2:e1:48:b5:44:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:D7:89:2B:91:E1:87:B8:26:4A:DD:F9:CB:F2:41:AF:7B:BD:13
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:fb:58:d1:8d:51:8b:4c:59:88:d1:e5:4f:77:ed:0f:53:
31:04:82:cf:63:c2:de:9c:7a:75:4a:5b:4a:d6:40:d7:c9:5a:
79:3b:7d:cc:48:37:79:b2:c9:65:79:ab:c0:34:0c:ad:ad:c2:
c9:c0:0a:19:1b:05:20:12:e6:a2:e5:7d:3a:9a:fc:7f:b9:b0:
e3:57:fd:f4:10:2a:36:34:e7:5c:37:79:dd:4d:f5:21:2d:95:
a9:00:f6:0b:7b:67:4e:5a:9a:cc:bc:6d:00:0f:c9:fb:34:5a:
83:90:05:41:5d:93:53:b2:1a:de:80:3b:fc:53:a2:46:96:a6:
01:03:83:7a:03:4e:79:2e:75:28:ac:6b:df:bc:c6:05:17:ad:
81:57:1b:e2:13:92:96:19:cf:6b:a3:95:1d:52:33:63:3d:c7:
81:4b:49:b0:04:1f:bb:d4:c3:0b:db:93:26:56:3c:fa:e7:73:
dc:09:a4:ce:ed:89:a6:11:47:0e:4b:07:03:35:0c:0c:60:9e:
5b:a8:f8:64:9c:30:84:20:84:8f:3a:38:a6:f1:c2:9c:a6:69:
d1:ee:8f:74:15:29:e3:a7:2a:65:dc:61:f5:ee:5f:14:7d:f5:
4f:a0:50:8e:10:9f:01:67:35:cb:46:e2:97:9f:cf:f9:b4:5b:
2c:b4:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:35 2025 by rpki-client