Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: OevTV4rfstZwVf2peskT3KVqWx2pcxyPviH+Rfaxnlg=
Subject key identifier: 31:C8:54:E4:7D:28:40:5C:BB:FC:96:3F:D8:F6:F7:12:BD:D3:AB:02
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 0198D6CDB5377B6B26FB99A949A1A9E76D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0C76
Signing time: Sat 23 Aug 2025 12:01:02 +0000
Manifest this update: Sat 23 Aug 2025 12:01:02 +0000
Manifest next update: Sun 24 Aug 2025 12:01:02 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: 7SDXMf3KNApDJMwBP7nPfyr2EAQDV/YgDkoqtyOLXDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b5:37:7b:6b:26:fb:99:a9:49:a1:a9:e7:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Aug 23 12:01:02 2025 GMT
Not After : Aug 24 12:01:02 2025 GMT
Subject: CN=31c854e47d28405cbbfc963fd8f6f712bdd3ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:2a:76:42:2e:f9:96:2b:87:cb:56:03:b2:
bb:6a:42:4e:a6:6f:df:83:44:25:46:96:13:4a:91:
e5:92:1e:8e:63:72:40:f2:a8:6b:e4:c9:49:03:73:
0b:9c:d1:9a:1a:33:87:26:92:ca:e5:e6:cf:ef:15:
44:69:fa:9d:f6:62:85:be:af:d4:6d:00:10:9c:29:
3b:0b:4b:1c:fa:c3:69:55:63:9b:67:a2:7e:c8:d0:
84:a8:96:a9:d4:9f:4a:9e:fb:12:cb:dd:96:2b:5c:
e4:1d:20:89:67:17:7b:99:62:63:ab:c3:24:89:3d:
e4:aa:96:5a:93:dd:a6:ed:c4:a0:7c:95:68:5c:06:
bd:66:8d:7e:d6:f6:e4:0a:0f:52:81:5a:d1:11:25:
2b:d6:c0:25:2a:c3:03:c1:93:31:2f:80:56:b9:2a:
b6:e9:63:3b:ff:48:30:fc:54:7d:ff:5a:ba:87:99:
4e:48:1c:1e:5b:1a:d3:0f:29:df:d2:4f:8b:72:bf:
0b:aa:60:7b:f5:b0:ea:cd:93:ae:0b:2a:5c:6f:33:
d9:dc:30:83:6e:d4:5b:9f:f6:96:52:96:26:8b:be:
0e:37:8f:6e:2e:ca:ab:f5:05:6e:78:26:64:d1:ec:
1f:e6:f6:6e:5a:40:16:a3:1e:d4:2c:76:9e:e6:d9:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:54:E4:7D:28:40:5C:BB:FC:96:3F:D8:F6:F7:12:BD:D3:AB:02
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:19:24:dc:98:8d:5f:d4:60:af:d2:46:8a:8f:30:bf:16:
fe:ea:c7:80:c0:df:8b:87:77:68:22:53:11:9c:a0:38:61:67:
2e:f0:36:17:1b:6d:db:06:0a:e5:b2:5a:f0:01:23:d8:8c:60:
ba:8e:fd:93:dd:5e:8b:44:d4:2e:0c:23:87:f9:cd:e2:0d:7d:
79:50:10:bb:7b:9c:c0:f6:6f:0b:66:67:78:90:cb:a5:b6:d7:
45:06:29:9b:90:aa:5e:49:20:6d:c7:dd:a1:0b:f7:60:ca:aa:
61:80:49:d7:85:aa:0a:7a:01:20:16:ee:72:97:58:96:94:4b:
95:e8:37:69:91:bd:83:92:7b:40:87:db:be:21:ff:03:d7:35:
88:54:7a:af:f5:c2:41:75:dd:00:24:22:3d:4b:bc:75:97:63:
e3:f6:d9:4f:ba:9f:1a:ba:9b:66:ba:9e:e8:8f:b8:5a:fe:96:
2b:93:54:91:a0:0a:11:85:de:68:47:bf:4d:90:a6:71:f4:5e:
8e:21:2e:06:4f:20:3f:94:2a:fe:19:8d:8f:e7:3e:bf:9b:bc:
bd:b2:98:a5:2a:e0:ef:c0:8d:4e:31:56:b6:1b:ca:d7:2d:9f:
53:fb:52:31:86:42:30:a3:66:5b:6b:18:4b:b5:ad:b5:2e:c0:
08:c6:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:24 2025 by rpki-client