Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: HFCiPE1zj+0j4G9TvIN5I6ZFAIuBHwy2D75qOjxP3Ho=
Subject key identifier: 3D:BA:58:64:1F:43:14:85:32:2D:DD:FC:53:91:8B:DC:71:47:D6:8D
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 0198D5156B7F34453193663DA32F889EAECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0F86
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: KTY7fp1BDte2Ff6AmmvMZN3MbiHuw1gRrQVsqFlw1gg=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6b:7f:34:45:31:93:66:3d:a3:2f:88:9e:ae:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=3dba58641f431485322dddfc53918bdc7147d68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:4d:45:4f:37:2b:c2:31:26:13:fa:65:a2:
be:bd:29:94:8f:9b:c1:0c:7b:7b:d6:78:19:9e:52:
56:b3:84:c6:c7:6a:fa:31:0b:f9:b6:64:83:f9:9a:
40:b5:cc:c0:65:1d:fc:b5:1c:9c:06:dc:66:e7:62:
84:db:cf:13:d6:7f:c0:5e:bd:a0:bb:74:ea:c4:95:
c7:c7:3c:db:cf:6c:f3:57:c9:62:a4:2e:57:81:93:
5a:a8:50:d4:80:48:9e:1f:c0:84:1f:77:e1:2e:c8:
29:eb:c1:91:db:44:ff:ea:70:1d:2c:cd:49:a5:f9:
5f:ce:89:0b:a8:2c:72:17:31:65:3b:3b:83:4a:61:
df:13:2c:70:59:16:dc:2d:31:07:17:63:c8:33:f3:
96:0e:78:a6:72:84:71:0b:a8:cb:80:56:61:e2:5d:
cb:e3:44:5e:c6:cc:ec:12:9b:20:54:d6:7a:2e:b0:
e3:ea:64:8e:65:7c:77:09:b8:25:5f:fa:b9:a0:c1:
b6:d0:e1:70:e4:96:73:5d:bc:a9:df:fd:66:58:0a:
4e:89:79:d3:19:ab:f0:7a:7f:91:e2:35:14:52:1d:
6b:52:f5:c5:93:5c:48:3a:0a:0c:04:b4:1d:50:f9:
89:2f:33:2b:ff:60:2b:30:bc:70:b9:a8:10:9a:2e:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:58:64:1F:43:14:85:32:2D:DD:FC:53:91:8B:DC:71:47:D6:8D
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:23:84:4f:c5:64:a7:c3:2e:27:c2:93:3e:42:09:b2:ca:
dd:31:ff:7d:58:41:75:55:bc:10:d1:9f:15:73:6a:71:96:1b:
a1:1d:38:c5:e1:20:6f:8d:4c:9c:60:24:8c:76:0c:83:dd:66:
46:53:ee:c4:d6:0a:e0:e9:a6:e2:3e:42:22:33:ab:2e:63:3f:
a1:c7:ee:c3:1d:cb:87:46:e4:25:43:8a:9d:83:4a:df:37:84:
ba:74:78:8b:d9:cf:39:92:b5:83:e0:8e:71:4b:a4:22:46:5e:
3c:f8:8f:e0:bb:8e:62:f2:6a:e2:d9:cc:aa:23:fc:83:5a:c1:
e6:67:dd:ff:48:8a:56:17:5f:42:f8:63:06:06:da:9c:66:f0:
a7:33:11:d5:33:73:1b:3d:c1:ec:f1:ca:3f:12:ff:f6:a8:a5:
11:b0:12:6e:e4:6d:99:fc:e1:62:fe:12:24:85:e5:ab:7f:cd:
bb:d5:e3:9e:a3:af:d0:c8:da:d5:0d:65:8a:6b:ff:7b:c8:a9:
1b:bc:09:df:c7:10:0e:35:a4:68:ad:3d:7f:5e:19:ef:cd:5f:
5f:2b:05:a5:cf:ad:1b:65:31:44:9b:23:4a:c0:ad:cf:cb:05:
69:ee:4f:34:b0:5a:b3:ce:de:02:ce:c4:15:c0:03:2b:e3:33:
99:db:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:34 2025 by rpki-client