Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: Hh25prJ+ri7g++oaTBNz9fLqY+keZ2OtZ8llnZQ8W3w=
Subject key identifier: 82:DE:7E:B7:00:89:A2:93:BC:07:C9:38:E6:24:EA:94:B5:0D:34:05
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 0198D5BB9E538AD9E6776C65D2858DCD7B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0D20
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: nzpFtc+xi9K9Y7pwUfn7qjodpG8yiPIKLB6c9KWjEOE=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9e:53:8a:d9:e6:77:6c:65:d2:85:8d:cd:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=82de7eb70089a293bc07c938e624ea94b50d3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:b3:4a:3c:36:c5:ec:d7:3e:f7:49:42:8d:
64:34:8e:2b:85:bf:2d:17:b3:c2:4e:fe:78:94:b8:
a3:e1:6e:55:fd:a3:35:b3:3c:84:c5:12:16:58:b3:
cd:e4:4e:cb:e9:7d:80:f9:0a:b4:3c:8d:2f:f4:f9:
b4:58:cb:80:a0:5d:bd:51:84:d8:a0:1a:fe:3f:4f:
9c:02:a3:07:f8:d7:a5:03:63:86:c7:86:c6:bc:dd:
7b:9d:a7:35:f5:fd:07:28:09:06:07:ca:68:94:85:
b6:a9:06:e6:3f:e6:47:30:d6:0d:6b:17:19:04:9e:
51:24:c5:3e:a6:44:fe:62:a5:e3:f7:fc:dd:47:39:
82:da:e7:a6:a5:ed:28:9e:27:e5:9e:be:38:89:a2:
d6:a8:89:0f:1e:b9:07:26:2e:47:10:b4:03:bd:c2:
3a:5c:6a:3f:c1:3e:c7:7e:8c:14:49:05:1e:cc:ee:
51:0d:b3:cc:fc:77:a5:98:b4:79:eb:37:b9:76:a4:
eb:51:51:60:39:d9:56:71:3b:42:0b:8e:12:16:bb:
82:08:91:22:ff:a8:44:1a:c5:ab:dc:26:fb:3a:5d:
b7:3e:7a:08:17:b0:50:9d:2b:8a:a9:bd:9c:90:9a:
13:39:7b:6f:de:ec:93:d8:69:44:25:cb:b5:b2:93:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:7E:B7:00:89:A2:93:BC:07:C9:38:E6:24:EA:94:B5:0D:34:05
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:97:c5:16:4d:c9:7e:a4:51:c2:b3:ab:dd:25:b9:a1:40:
cd:8f:1a:30:c1:18:a8:c9:28:74:c9:f6:6d:f1:1c:14:4b:78:
56:0c:bf:49:a4:57:c6:45:af:32:4d:f3:8a:c1:de:5c:54:a0:
30:89:b0:30:56:01:9e:7c:df:d5:17:02:72:e0:e5:70:73:b6:
0b:a1:73:ef:da:a7:f4:fc:54:8b:ee:7a:6f:2d:f2:d8:bd:78:
51:7a:10:5f:fd:2c:a6:65:c2:ef:e8:a6:bc:3b:85:21:47:f3:
60:28:61:66:e0:5e:24:22:1e:e8:fb:eb:6f:dd:a6:da:00:97:
01:4e:c0:ed:fb:02:67:46:7b:35:89:4b:ab:26:c4:b4:64:de:
5d:47:ca:0c:a1:8f:14:8c:96:9c:87:9c:33:48:83:18:8b:54:
d5:c6:4e:6e:ba:46:21:46:c5:20:99:09:6e:9a:04:c6:f1:45:
1d:35:f0:fa:c4:20:dc:2b:d9:35:16:92:54:ca:09:52:59:c1:
f0:a9:39:e2:2f:1b:b1:b9:a5:08:66:86:40:65:c9:f1:9d:76:
e8:f6:16:30:f7:6c:9b:59:a6:23:29:c8:fe:07:23:50:85:b9:
6c:18:dd:87:6c:02:41:24:27:60:7e:30:b8:80:92:e6:8b:27:
d2:c8:1e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:14 2025 by rpki-client