Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: fP21AWmagiYHocWxBZhgJe8qmHa9sVK45aRC+nTl/rs=
Subject key identifier: DA:9C:85:68:78:EC:BD:B8:70:BC:37:91:46:BC:75:F9:99:8B:AE:B4
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0198D4744959FB78E47063B397274A92A6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 01:04:07 +0000
Manifest this update: Sat 23 Aug 2025 01:04:07 +0000
Manifest next update: Sun 24 Aug 2025 01:04:07 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: Ih0m5KGfLuNNO+qrArG8+2/UkDb0aHLTksaoIra9cos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:49:59:fb:78:e4:70:63:b3:97:27:4a:92:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Aug 23 01:04:07 2025 GMT
Not After : Aug 24 01:04:07 2025 GMT
Subject: CN=da9c856878ecbdb870bc379146bc75f9998baeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:82:71:ef:a7:43:cc:7f:05:25:79:a5:67:
12:c9:33:74:fa:0d:d3:fe:36:4f:91:2c:20:42:9e:
b6:e4:a7:2b:ad:b5:05:51:77:2a:10:4b:f5:75:1d:
f8:5a:75:19:95:14:8f:86:72:ce:84:f7:c8:69:6e:
ca:89:af:9a:52:cb:e4:e4:b9:27:c6:b5:7f:de:7a:
e8:ba:df:45:df:de:a2:c5:50:f0:3f:d5:0d:0a:14:
87:64:78:7a:7e:20:0c:27:88:b5:75:21:00:d0:74:
be:51:11:4c:de:b9:f7:84:f8:30:7f:bd:9d:bb:6f:
09:3d:40:e1:47:fc:58:93:e8:c3:ee:28:dc:c5:a6:
d4:23:d1:f2:51:be:ba:75:6a:cf:7a:7c:c7:b1:f3:
ff:38:bb:7c:5e:d2:b7:32:69:30:01:f7:1a:33:2b:
77:14:7a:1c:6f:4a:15:dd:28:68:fc:72:5e:7f:d0:
65:97:d1:57:2d:d6:92:7a:95:c1:42:d5:b0:bc:19:
8d:65:48:94:80:72:20:43:4a:bf:61:e4:b1:bb:1f:
36:36:3b:55:85:38:4f:8e:8b:68:3f:e0:9f:eb:69:
e4:55:f3:8b:ef:73:52:7e:19:64:36:22:39:e6:93:
ca:a5:e3:b5:62:af:b8:59:71:ef:6c:1d:77:cf:d5:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:85:68:78:EC:BD:B8:70:BC:37:91:46:BC:75:F9:99:8B:AE:B4
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:45:eb:e7:36:31:57:26:ea:c4:23:0b:61:3f:ee:68:e7:
11:99:24:89:d6:1f:29:6c:96:cc:83:fa:ed:02:4e:9b:29:7d:
a0:2c:b1:b7:10:32:5b:7a:e9:ff:7e:e8:aa:b7:cf:e4:5d:1b:
1e:cd:27:56:55:8f:96:cf:0e:8e:9a:4a:e5:e3:71:7a:70:4d:
a2:50:9a:bd:00:bc:69:c9:6b:8f:5f:9e:7d:e3:fd:76:a8:91:
94:73:4e:20:53:75:12:5c:48:94:28:60:84:a1:eb:4d:fc:bf:
27:06:a9:e9:2b:b1:6c:ac:7f:a4:ad:f2:a9:ec:b4:5f:78:96:
3a:da:1a:85:04:e0:db:f8:50:55:a3:2d:06:97:e0:a5:7f:78:
ba:bc:3e:9a:76:f7:47:5e:ea:15:a8:78:01:8c:7f:69:76:14:
15:5a:da:40:77:8a:36:08:26:ad:04:19:4a:a9:bb:1d:f7:cb:
9f:42:f0:ba:d9:a9:e4:64:d1:83:94:44:36:e9:17:9f:95:0b:
57:1c:49:88:69:f9:85:58:2e:7b:0c:66:02:8e:82:8f:b3:74:
ea:ca:00:60:ea:87:ba:fb:6a:3e:8b:e3:e2:d4:48:0d:d2:a3:
d1:46:93:34:d5:68:6f:aa:a6:46:80:d6:87:92:33:e3:65:f6:
04:8a:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:41 2025 by rpki-client