Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: G/aRd8cc7l9NbQ/+Fu86N+K0SY/Vdd+0bX9EGk1LJPU=
Subject key identifier: F1:69:C6:14:B2:78:D6:C0:24:31:04:E4:37:2E:67:0A:33:0B:59:D4
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 0198D54DE99BEFA41DA4B7A26781FDDAADE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0CB2
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: sDCQU4T1wa2JW2xNysOEC2omw46C9IqmtuOP79z4sVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e9:9b:ef:a4:1d:a4:b7:a2:67:81:fd:da:ad:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=f169c614b278d6c0243104e4372e670a330b59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:89:7b:a1:dc:38:82:f6:43:f8:b3:f9:86:
87:8f:6f:17:84:3d:31:0d:ba:3c:e6:1e:4d:48:04:
21:e8:b6:26:c9:42:ee:89:b2:9a:eb:e2:8e:64:23:
47:f2:bd:0d:30:82:3d:f1:77:be:f6:86:db:98:39:
eb:14:95:78:06:24:58:3b:9e:44:62:db:a2:45:17:
6f:1c:22:2c:b0:be:7f:3c:45:08:20:b7:94:bb:16:
43:78:a3:a4:4d:19:21:8c:4c:58:30:8a:53:8a:76:
77:05:f2:7c:d1:2d:50:08:a2:bd:93:a2:cd:51:bc:
98:48:f0:67:aa:0e:dd:b1:e3:d6:10:2b:28:06:79:
37:51:17:82:2f:ee:e0:95:aa:5c:3a:cb:84:e5:9b:
a2:d8:3f:04:c9:8c:10:8b:ff:36:04:75:c6:5c:03:
d4:46:b5:12:8e:8f:b1:8c:43:78:25:df:49:c7:22:
a1:98:fd:3a:db:6a:bf:b2:76:9d:24:48:34:90:d7:
42:6b:58:ff:86:9e:a8:b1:f4:39:5f:09:22:66:ca:
f9:c9:4b:34:9b:67:23:6a:1f:5c:84:6f:74:db:ac:
a0:22:98:1e:06:c9:06:ee:ce:59:df:2a:a8:cb:4d:
ac:b1:58:6f:0c:7e:f4:7e:fc:be:3e:92:6f:60:3a:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:C6:14:B2:78:D6:C0:24:31:04:E4:37:2E:67:0A:33:0B:59:D4
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:37:1c:1d:4a:91:3b:2d:4b:2e:7a:c9:be:66:02:31:64:
30:90:c9:2b:b5:03:16:f8:74:1f:3e:47:ae:6e:eb:48:72:7e:
2b:b5:f0:3c:26:e9:b4:67:82:12:48:86:21:50:58:e2:d2:e0:
78:52:9c:20:d4:e6:8a:38:09:8a:a9:ea:20:7e:30:95:13:c3:
b5:72:83:ba:2a:76:9e:8b:c8:59:aa:f1:4e:97:dc:7c:32:e4:
c0:30:d3:18:b8:24:67:ec:b8:e9:64:f1:15:e9:ec:fc:ae:08:
55:9c:76:91:18:45:0c:b5:f1:f8:c1:49:f0:b5:ab:cd:e2:c6:
5d:70:58:70:be:c6:35:af:f4:80:8a:7d:19:a7:01:55:55:c1:
1f:06:f2:7f:1f:26:93:a5:e2:6e:25:3d:dc:8f:6a:83:91:77:
cd:0d:22:fa:e9:c0:4a:58:de:f5:28:10:cd:14:7c:5b:b1:62:
c1:d5:ad:c6:3c:07:86:85:96:21:cf:e5:0e:0a:fa:d9:23:c3:
de:6f:ca:80:02:1b:a2:4c:11:09:10:35:af:94:05:69:21:cb:
b5:00:e8:c9:4e:89:5d:42:f0:40:8c:fd:bd:a7:af:a9:c9:b2:
4a:f5:a4:1e:48:b4:6e:4b:b5:cc:46:81:66:cb:ce:d8:fe:5a:
58:2a:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:31 2025 by rpki-client