Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: Gh8f4BK1/pvOmrBQoXNoOHjGNYwz9lwsXBDaCxcSvkI=
Subject key identifier: 18:37:73:57:52:B7:73:AF:5F:C4:8F:3D:92:A3:E6:29:59:63:22:39
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019A01111F224B7712A1AB739F360884C714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 167E
Signing time: Mon 20 Oct 2025 10:01:30 +0000
Manifest this update: Mon 20 Oct 2025 10:01:30 +0000
Manifest next update: Tue 21 Oct 2025 10:01:30 +0000
Files and hashes: 1: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (hash: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: oQGga8WcI5+aF/qejHWWF9RXP5LX+ugGb6qA8GaCUNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:1f:22:4b:77:12:a1:ab:73:9f:36:08:84:c7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Oct 20 10:01:30 2025 GMT
Not After : Oct 21 10:01:30 2025 GMT
Subject: CN=1837735752b773af5fc48f3d92a3e62959632239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:57:1a:77:29:54:76:70:62:64:1c:e7:f3:
5f:2a:d7:cd:09:3d:d8:98:a1:a0:f1:38:56:a7:9f:
62:55:52:cf:d7:3b:57:1b:0a:ec:f4:3b:ce:02:f8:
72:5a:50:f8:fa:04:fe:36:2e:64:26:60:58:da:b5:
f4:7c:03:4c:5f:d2:e1:2c:f4:54:bf:96:64:78:82:
d5:f4:f2:db:eb:a1:b5:9f:cf:9c:a4:3d:e8:ad:5b:
69:7e:18:18:1d:2a:c0:66:3f:8a:4b:0f:93:d6:e9:
83:fd:44:65:e2:2b:ba:20:39:af:2e:59:1c:fd:ec:
ab:ee:d3:c1:0e:7e:38:44:5c:c1:ec:a0:98:3f:2d:
48:e4:d3:95:51:48:3f:a1:cf:3a:18:4b:45:34:92:
f3:87:30:6d:2b:fe:0c:7c:ab:7d:17:47:1e:04:18:
c1:87:7a:c2:e3:26:e7:fa:23:03:67:ba:5f:e5:d8:
72:e5:34:f2:1a:ce:c8:d1:6e:b7:0c:48:fd:19:a2:
34:6f:07:34:21:8e:15:8e:f8:d8:bd:fe:b0:a2:5e:
31:de:2e:5b:8d:45:ba:a6:91:8d:78:f8:e7:b1:02:
8c:d7:cb:f5:ae:a4:26:61:7b:9b:58:cd:18:78:70:
a6:8d:21:9e:2e:52:5d:40:02:74:ff:0f:94:57:b0:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:73:57:52:B7:73:AF:5F:C4:8F:3D:92:A3:E6:29:59:63:22:39
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:76:7f:44:55:b5:9c:16:8d:2b:f0:8f:92:51:83:e0:b7:a1:
fe:4a:11:4e:e4:e3:ac:72:09:07:ff:db:c5:f4:05:24:9d:c8:
04:e5:07:3a:b7:b8:38:6a:77:1f:a5:ed:c8:bc:d6:ab:bb:be:
d8:af:24:f6:fd:4b:f1:90:a6:32:af:95:1a:9a:bc:77:f8:f1:
79:7f:0a:8b:cd:cb:37:6a:45:af:09:22:bd:60:b4:b5:9b:3c:
1f:d4:e8:d4:2a:6d:3a:95:aa:fd:c8:cb:b3:41:7c:08:c6:d6:
07:bc:a9:a5:64:87:26:7b:ed:f0:6c:2a:56:74:37:2c:b5:54:
c6:87:69:f9:4e:b0:85:10:e2:52:70:8b:27:d4:de:f4:66:ab:
16:be:d8:85:c9:08:3c:cc:a8:36:81:c7:08:62:1c:9e:cf:68:
16:4b:14:96:2b:3f:46:eb:de:bf:d5:6a:67:4d:fb:dd:ee:50:
65:10:6c:90:8d:1a:bb:73:7f:17:b4:4a:6c:9a:5b:b1:9f:18:
53:ec:e9:12:ed:69:b2:d4:e5:c8:aa:da:17:30:a4:7b:a8:e1:
36:dd:e3:aa:82:cf:b0:99:50:84:45:35:14:fd:6a:4b:e2:0c:
00:3b:de:e8:fa:47:f2:5e:29:cd:22:7e:f4:cf:bb:32:87:94:
dc:12:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:38 2025 by rpki-client