Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: D6GME4bgL0FGrwgiQV/a6DpOWDQQUPX9vOnJI+fdq7A=
Subject key identifier: AD:72:99:6D:8C:97:09:04:04:45:73:8F:93:77:86:0E:10:02:46:DD
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 0198D472705A84532C1437D48CFEAC6B9EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 21
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: IQ9wLXLUZJpqcSIpCMfWB1yWSjQ.roa (hash: P/Kije3VGV+c8f4h3dI1u68XS8jsbX8ac8gPFSGcgjs=)
2: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: ePqlbohZFIVwSFLoDZOzxr7Fihvm6jxeKJDS+TmxPro=)
3: nyurKK5lYc3Jd4A-TJ70SVH4ScU.roa (hash: zjZFoWXTAxAXpj9+aZvhkarE3nbYeEPl4fyvTkTHB8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:70:5a:84:53:2c:14:37:d4:8c:fe:ac:6b:9e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=ad72996d8c9709040445738f9377860e100246dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:bc:d1:ac:dd:74:51:18:97:22:8a:d9:52:
22:11:8e:6b:3d:df:ae:7c:cb:ae:5a:89:c3:f5:60:
43:24:a1:b1:99:7f:5d:1c:a6:92:07:9c:c1:4f:47:
89:a2:97:8d:e7:d9:f4:40:91:a1:1d:d5:42:24:6c:
65:e2:3b:8c:9e:41:35:14:aa:b0:44:15:fc:89:3f:
cd:0a:96:20:8e:81:7b:15:82:b3:f0:f4:c9:f0:bd:
49:f1:6f:e1:35:ed:84:2b:85:48:41:8f:bb:35:8f:
9b:bd:23:1c:7e:e6:96:01:1d:d0:fc:e3:0e:4c:b3:
eb:9a:b5:cc:df:6b:4d:ca:01:e3:65:a4:be:07:34:
71:88:50:ab:22:83:2f:75:0a:fa:38:d6:59:0e:54:
72:ba:27:ee:aa:64:14:b5:f0:74:9c:1e:b7:54:0c:
d9:49:f8:18:ae:ca:41:9c:a1:55:24:4e:b2:a7:67:
a4:d2:fa:21:6b:28:27:8b:32:ef:eb:1f:16:b8:a3:
8a:df:82:0a:9e:39:ff:16:55:2a:9f:cb:c6:de:f8:
d4:d7:3d:df:69:be:2a:1a:5e:21:51:0f:85:b6:ca:
22:28:40:8b:0d:1a:48:52:97:00:44:31:4d:9b:09:
7b:e6:e0:22:9e:9e:60:7e:60:0c:37:68:b2:1d:ae:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:72:99:6D:8C:97:09:04:04:45:73:8F:93:77:86:0E:10:02:46:DD
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:7e:18:a1:e6:f9:61:ba:06:97:b0:05:76:4e:8a:e6:8e:
1a:03:b7:f5:03:45:73:39:9b:3b:25:69:1e:26:d1:e6:fe:e6:
34:81:af:34:e1:36:04:4b:db:d5:de:fa:cf:24:87:2a:ca:54:
89:22:f3:02:43:fa:ca:e6:7b:ff:ec:39:eb:48:68:86:ad:c3:
6b:de:59:66:86:a0:47:b0:c3:e9:92:5c:02:55:07:db:17:be:
db:a4:be:0e:1f:00:d3:45:32:4e:16:88:37:f4:34:34:5c:30:
0b:55:74:44:87:38:b8:3c:e4:46:13:12:8d:f4:8f:af:0c:21:
dc:a3:4b:ff:ed:c3:13:b4:71:8b:87:97:b9:eb:23:83:94:0c:
bf:06:fd:75:e9:57:98:50:cd:05:b8:02:f5:81:0b:0f:91:d5:
bd:09:44:5b:61:a2:b9:5c:f1:e1:8b:f7:b3:7b:32:1a:59:be:
62:dc:5b:3a:6b:e2:f7:d0:49:0d:6d:8e:29:82:1c:ec:f4:59:
60:c5:bc:ed:76:c1:53:9d:82:a9:dd:3a:69:03:0f:8a:a3:be:
1d:19:37:1c:c7:e3:ce:3f:94:06:d6:4a:96:ef:ee:28:e7:93:
a7:fd:ab:a7:67:23:58:60:b8:05:e5:2b:e9:72:27:b8:6f:5e:
00:00:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:37 2025 by rpki-client