Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: br7WbWJSao2nDOtqQxdyYFT+MtHQmX4DZyDFaL7DR8Y=
Subject key identifier: 1D:F6:5C:25:F4:F4:9D:45:74:37:8B:B7:E2:BF:AC:82:FD:27:F0:38
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 0198D70589517CE86FF3457D3003B998EF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 04C3
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: rIdDmE5nW9bSSu6xXqXZnRj4M+ABU8t5s8KUxkIu68c=)
2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:89:51:7c:e8:6f:f3:45:7d:30:03:b9:98:ef:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=1df65c25f4f49d4574378bb7e2bfac82fd27f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:ba:13:1d:83:ba:82:9e:e7:bf:e6:e7:57:
26:6a:63:75:6c:3b:89:d1:6f:49:6b:bb:47:50:48:
6c:56:60:84:ec:1d:7b:99:9b:20:c0:79:48:23:5c:
02:59:6b:99:4c:1b:7c:06:e1:4f:98:88:6e:68:af:
63:26:7c:4c:82:e7:d8:88:70:62:3f:74:28:c5:59:
b1:64:cb:e4:a8:87:b8:b3:57:51:8f:91:20:a4:af:
8a:98:43:e6:8f:5a:d9:bd:b2:75:8c:0e:25:6c:ba:
99:e4:ba:08:b5:43:49:20:03:03:ba:d5:10:de:71:
4b:e8:76:71:e2:ae:e7:7a:a8:de:75:72:c4:4c:05:
f4:fc:ca:9e:cc:20:6e:1d:ee:59:99:ca:d9:b1:10:
e0:1b:1f:7d:bc:0e:99:24:40:2f:71:42:5d:6a:08:
36:50:05:fa:4b:65:28:cf:ab:93:90:7e:a9:0d:78:
0d:49:67:47:16:a5:04:d5:b6:40:62:8d:f7:a8:4a:
3d:7b:22:f6:e0:1a:cb:7e:6a:aa:2b:d9:ca:a7:05:
f2:68:00:6e:af:8c:1e:dc:d1:93:fe:e1:71:6f:19:
fd:7e:c4:c8:ec:2d:12:07:76:a4:06:73:5b:22:a4:
c2:70:94:d1:e2:63:60:26:1d:32:38:99:40:91:c3:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F6:5C:25:F4:F4:9D:45:74:37:8B:B7:E2:BF:AC:82:FD:27:F0:38
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e5:31:f2:e3:44:5d:de:6b:07:87:2e:aa:85:70:f4:e8:82:
53:d7:89:6b:15:2e:8d:42:7f:ff:c7:f2:95:cd:38:94:a7:ce:
6f:0f:af:fc:12:f4:f5:74:6d:9c:4f:64:76:22:ee:39:a2:10:
f6:69:55:f9:5b:62:7a:6a:1c:50:65:06:28:73:10:d9:d2:f8:
7e:87:03:f2:d4:65:99:1d:df:40:c6:c9:2e:9c:eb:88:5c:64:
85:e6:f7:db:65:84:f2:91:f8:d7:7b:57:6a:66:45:3b:be:4f:
5b:dd:58:22:d8:65:d4:37:e0:60:15:d2:95:1f:98:fe:b3:46:
bb:bf:57:e0:b7:0e:be:9a:95:b6:36:8b:41:e1:9f:28:d4:26:
93:fb:2a:bc:07:b2:75:82:5b:8d:aa:12:29:c6:a4:9e:e1:75:
e4:aa:41:d2:1a:92:28:e0:c6:79:35:81:41:aa:53:8b:23:83:
ac:f4:b3:40:8a:ea:9e:9a:2d:36:24:d6:05:25:6d:64:02:ea:
02:d7:b3:34:76:f1:b2:bc:33:1f:01:7c:8d:1a:6c:8a:d0:e6:
d5:b5:3d:99:7f:26:5a:5b:99:9e:21:1f:a2:e0:ad:12:22:37:
97:94:aa:ab:2e:8a:5a:69:d6:1c:42:ee:e3:c6:33:3c:e4:db:
49:95:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:35 2025 by rpki-client