Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: 5S6LgB4+o4CkWxQFRsqWJKED4yu/NphGTVzXqJV0WWs=
Subject key identifier: 26:AB:71:2B:27:F1:1A:3C:CD:45:E4:F8:0D:AC:E8:FD:F6:BB:68:17
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0198D40462369E471AAF0BB621C524365525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 0AFA
Signing time: Fri 22 Aug 2025 23:01:53 +0000
Manifest this update: Fri 22 Aug 2025 23:01:53 +0000
Manifest next update: Sat 23 Aug 2025 23:01:53 +0000
Files and hashes: 1: JZK6YSeBc1BbG83Qekl2aATyxHU.roa (hash: Wa+cbSmnDCoci/OWT42YCZ1RtEmxjW8RP6TQupPGRBk=)
2: LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa (hash: hMJW6h+5JE+dal9rkWR3bK6F1BlVNwt7VsR0ZpIQGdQ=)
3: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: 2qxpLGcBN7bTD1gD4z+nJHr1YhTa997CVe9Zf0pUKqA=)
4: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:62:36:9e:47:1a:af:0b:b6:21:c5:24:36:55:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Aug 22 23:01:53 2025 GMT
Not After : Aug 23 23:01:53 2025 GMT
Subject: CN=26ab712b27f11a3ccd45e4f80dace8fdf6bb6817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:c0:64:62:21:d6:dc:1a:ea:a9:09:f5:cf:
d7:d3:18:f2:26:10:69:45:2d:49:d6:c4:65:0f:7c:
0e:86:78:a3:8a:04:eb:1d:fe:31:42:a6:2f:09:c2:
6f:87:e8:05:d5:fb:e9:3f:02:ce:c8:1d:cd:12:5d:
77:1f:a9:63:3d:50:b2:6d:8c:7c:f9:ed:ce:bf:a2:
a8:f3:f6:5e:4b:06:d8:e2:dc:ef:9c:69:ae:0a:57:
07:55:2f:8b:b1:ce:0d:cc:78:1f:09:75:fb:1a:74:
45:36:a1:cb:9c:13:18:65:59:8b:54:3f:1c:97:ea:
75:c3:d2:4d:bc:28:19:b0:93:72:b8:4c:79:45:77:
a0:37:4e:d6:9f:88:07:50:15:8c:77:4b:bc:a8:80:
06:c6:0d:25:97:f1:c6:76:8c:c7:8f:57:f1:e4:bb:
e9:e8:76:a9:07:05:94:c0:df:87:46:ff:bd:f4:fe:
71:30:a4:9a:6d:43:88:fd:ce:45:ba:0a:02:6b:69:
b4:da:7c:f1:ac:43:9c:5c:43:de:f0:bd:6b:05:78:
19:9b:69:25:d5:5a:30:26:b0:6a:25:bd:67:26:31:
41:e9:fd:53:46:cb:0e:4a:4f:45:45:b5:24:37:54:
a9:74:2c:fa:73:25:75:b0:9c:00:6d:65:c7:11:07:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:71:2B:27:F1:1A:3C:CD:45:E4:F8:0D:AC:E8:FD:F6:BB:68:17
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3a:54:68:f4:84:aa:f3:98:6b:5a:72:b1:38:5b:64:0c:03:
75:61:17:f0:0f:8a:db:72:ff:08:7a:9a:da:aa:2d:f8:bd:19:
f2:bd:b7:94:bc:df:38:4e:42:7f:c1:95:ac:95:bd:24:7a:f1:
68:aa:b4:36:0e:50:9f:f8:48:5a:07:e1:94:21:e4:44:ff:b6:
f9:3f:c2:57:2c:6f:af:88:94:d4:b4:a1:56:12:9d:40:96:d0:
31:b1:53:bf:d7:49:31:7b:19:e6:7d:b0:c9:db:2b:5c:ec:e3:
5b:4e:59:5d:93:0c:6f:06:17:3e:39:1b:da:55:8f:2e:12:48:
a8:dd:3c:09:6f:cb:e5:56:5b:87:5a:15:ed:96:ae:29:72:ce:
6d:0e:56:01:2e:39:38:a0:d5:de:6c:e5:bd:17:a7:43:df:35:
3b:cc:b3:9f:22:0d:fa:10:86:b8:05:b8:9a:fa:7c:e1:aa:28:
8d:5c:16:7b:2d:3f:e2:e1:dc:a0:6a:8e:3f:c0:4b:56:ec:e3:
6e:c3:22:e7:ee:04:1f:0d:e0:5b:7b:6b:68:b8:49:3d:18:a9:
bb:08:a3:78:d3:de:b1:d0:ac:68:53:27:8a:6a:1e:fb:63:51:
29:8b:bd:64:a5:dc:f8:90:46:e1:f9:44:4d:0a:98:80:c0:ed:
a8:f9:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:57 2025 by rpki-client