Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: 6oE1qrMFGO6doTSqh4IgLulQv7XmInGp+RPIs4CpGeI=
Subject key identifier: EA:AB:3B:03:86:68:7D:3D:F5:7C:7B:07:88:C4:2E:C2:D6:91:4C:4A
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 0198D5BB93B80A79DD8D83F041CE6D91279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0C89
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: +lG3/RyYV7wh6IVXXZgyqkh2AW21TxnCII9AQiTVp9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:93:b8:0a:79:dd:8d:83:f0:41:ce:6d:91:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=eaab3b0386687d3df57c7b0788c42ec2d6914c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:54:52:63:00:84:80:e8:9b:ca:57:ed:a4:
a8:75:67:ec:21:f1:6b:68:af:ff:ae:ed:c7:42:16:
85:a6:48:36:c5:50:d4:c9:ba:fb:b6:05:25:b8:66:
bc:84:31:03:5d:07:7a:be:f0:fa:14:32:5b:a6:e6:
fb:c9:18:6d:77:da:aa:d2:3a:a8:81:00:64:57:83:
78:9b:d1:01:d8:7b:c4:17:eb:1c:7e:f1:79:0d:a3:
df:90:8f:e7:08:9d:97:ee:8d:b9:56:1b:83:71:8b:
ea:9f:d3:80:f2:e0:25:c5:a5:e4:7f:50:b7:00:58:
99:ec:b0:d0:ad:1b:28:ce:09:13:62:ad:ec:57:6c:
58:ac:d2:4a:89:8a:8e:27:d5:95:84:a2:87:cb:12:
9c:77:ad:05:c3:27:35:65:9f:a7:a6:e4:0e:fc:49:
ee:d2:09:1b:d3:5a:f8:51:8c:e1:75:90:d3:db:c1:
64:53:b4:68:0e:7f:ab:20:b6:63:71:fe:03:bf:3f:
b4:cd:e7:a0:9f:58:20:03:c3:64:7c:7e:eb:64:c1:
ea:33:50:21:8a:72:6f:07:37:d9:49:79:2b:a8:6c:
84:e0:52:f9:df:d8:10:84:6d:3a:46:1e:97:73:4b:
9c:b1:20:13:d7:82:55:58:8e:0c:db:1a:82:20:92:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:3B:03:86:68:7D:3D:F5:7C:7B:07:88:C4:2E:C2:D6:91:4C:4A
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:76:fd:fe:ec:ed:2a:33:0c:22:6c:86:d8:46:4a:98:27:
c6:26:65:51:63:78:31:05:f3:cb:95:76:40:02:d9:e3:4d:a0:
fa:3a:b1:7e:75:1e:c3:fb:42:6d:70:4d:52:de:b2:4d:d5:16:
1a:3f:79:75:a9:6d:4f:45:55:05:dc:e8:de:47:6a:79:d6:c0:
d9:f5:a3:7a:e3:6b:d9:94:48:a3:79:00:41:9f:f8:0a:7e:cd:
81:8b:5e:dc:5d:25:f1:1f:99:7b:2f:4d:86:19:3d:8e:79:23:
2e:bc:7b:c8:86:fb:d3:19:d7:e0:22:46:d1:43:8d:2f:e4:fd:
dd:29:4b:94:ef:88:45:ae:80:23:62:6a:c8:23:f2:31:ec:af:
e1:87:4f:04:41:4d:40:dd:30:20:ac:20:0a:80:98:77:68:03:
90:70:03:e8:e6:0f:d6:51:fb:2e:d5:ea:cb:44:fe:cd:b8:a1:
34:7f:95:65:eb:f4:5a:10:10:1d:7d:d3:e5:02:88:6c:3f:db:
b3:d4:5b:a9:a9:5a:69:96:0e:7e:5b:34:6a:21:f6:2b:31:54:
53:e0:e8:e9:a1:dd:b3:8f:4e:dd:d6:62:d9:11:29:c8:13:80:
99:99:06:e6:c9:f3:be:06:0b:d5:6b:30:6d:51:46:fc:80:a8:
4c:44:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:49 2025 by rpki-client