Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: aei4OQgBzZ0YtPQ3jIn2f0Hh67B0TSVlzGA8r1DLq7s=
Subject key identifier: B3:35:E7:C6:CD:F4:D0:75:51:2D:C3:19:C4:B1:B7:B2:92:86:CF:81
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0198D583BE5A6AF3A88AD06AD703CD114200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 1048
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
2: XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa (hash: M960n+pp83g7kmhWyiZgDofrdj6V3LEDTiUjTB4coqg=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: bdxWuEPDS0gbugLkfUjMfgT+Dqoq0JvGcHTyBgCIhYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:be:5a:6a:f3:a8:8a:d0:6a:d7:03:cd:11:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=b335e7c6cdf4d075512dc319c4b1b7b29286cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:61:0b:91:ce:5f:e9:7c:33:4e:9a:88:b0:
8b:49:ef:4d:25:14:9e:bc:01:75:10:6e:5d:aa:62:
12:43:db:62:23:e2:70:40:62:3f:3c:70:54:64:2d:
a8:0a:e1:99:e7:22:21:06:89:f5:5e:5a:bb:a0:37:
45:f1:ef:ed:ab:f1:d8:40:53:97:5b:9b:85:be:84:
45:1e:d4:e4:65:c5:25:3b:4b:63:f7:69:c5:43:7d:
89:72:0b:98:93:07:74:68:1b:15:b6:5a:ed:99:e4:
ac:10:70:95:d8:4e:a7:64:81:56:53:5e:21:99:1c:
4d:d6:b2:37:29:3c:2a:09:9f:e2:c6:2f:05:62:23:
b5:49:7c:ac:8c:b1:38:2b:0d:10:fd:9e:24:21:f9:
18:32:a6:a9:b6:c2:1f:57:f9:2a:4a:b8:61:f8:48:
e5:de:c3:e7:de:da:66:6e:cf:2d:d1:7d:bf:4d:be:
1b:97:17:64:2f:af:49:35:d2:14:42:69:89:5a:52:
9c:82:c4:a8:f2:ec:a5:de:c5:d4:bb:a2:40:3e:9b:
af:bd:ff:20:b7:79:75:64:dd:7e:0e:a9:25:97:a8:
ee:35:7d:e1:1f:b8:49:d2:8e:85:03:53:9d:39:da:
c0:6d:24:58:91:3d:2f:2c:1b:2a:9b:52:a5:14:28:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:35:E7:C6:CD:F4:D0:75:51:2D:C3:19:C4:B1:B7:B2:92:86:CF:81
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7e:e6:9e:39:f8:93:b7:f5:9f:2e:ff:3b:31:d6:8b:4e:5b:
6a:9d:b5:92:12:11:30:81:48:38:27:91:cd:8e:a1:bc:55:6a:
bd:cc:77:47:f4:04:3f:b1:a2:51:f2:4b:67:94:9a:b5:13:ce:
cb:02:d7:a6:89:8c:1e:8e:c3:91:f2:50:ea:63:b7:23:2a:be:
fd:a1:5b:a8:f3:da:c5:0b:5c:0c:c0:a1:f5:0a:35:7f:fc:81:
37:9e:5b:a6:fc:00:d8:a6:2a:9c:38:71:58:1e:74:95:53:76:
7b:04:9a:f0:82:0f:bc:ca:4a:b9:92:92:bf:fc:cc:77:98:1c:
5f:7f:7c:f0:45:b0:2d:c7:63:1d:7c:fd:0b:5c:2d:13:8a:8b:
5c:34:5b:43:29:0d:8a:47:7e:6e:f6:79:47:b4:08:82:bf:45:
15:d8:67:25:be:1c:a1:66:3f:dd:bd:69:2a:a6:c8:b1:52:01:
fd:37:ed:f6:e8:5c:fd:7f:4a:42:c5:1d:84:11:49:71:0e:5e:
35:b1:8c:84:2c:9a:f8:c2:4c:2f:cc:4b:15:6a:e7:47:f5:42:
ed:78:ab:df:0c:e1:fc:e1:ce:69:33:a3:07:1e:ee:3b:3a:f9:
3a:63:6b:a2:16:ac:27:9a:e5:c1:e2:c9:7f:3f:89:db:fc:78:
44:e4:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:47 2025 by rpki-client