Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: +065flHVn8iLJA9dR36XR8zsdOUmOlwjIp8UFEsL+1A=
Subject key identifier: 10:F0:B5:BF:CC:40:BF:C2:4C:DB:66:F3:D5:50:DE:FF:E9:FF:5A:FB
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0198D4DFFE84FFDDB59C71099E107B783504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 04D9
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: P4PUnBd1248YaTmwBtDP6J5fWs8.roa (hash: /keox5bsKkY6B94jjXdUVZzK7QGAMHlF9rFaKPyVqXM=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: rOsq3EIJolHbLl1xr9NVJZCp38s0J5gfXFLq7lKs544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fe:84:ff:dd:b5:9c:71:09:9e:10:7b:78:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=10f0b5bfcc40bfc24cdb66f3d550deffe9ff5afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:d8:f2:18:a6:c1:ab:72:ae:9b:ae:73:23:
65:1c:54:94:59:7e:d2:2a:34:21:ee:df:d8:11:71:
a7:59:84:cc:18:29:0e:13:1c:63:43:97:20:66:4c:
d9:c9:c8:51:a8:c9:3b:43:8e:a4:c0:ed:ff:60:2e:
31:44:c5:64:0e:66:ac:0e:56:80:b0:28:d2:d3:bf:
2a:fe:de:02:59:74:df:6b:16:33:ca:e5:89:13:a4:
71:57:3b:39:e4:e5:2f:5c:21:1a:2a:cb:c4:a9:2e:
69:af:db:bc:bb:ba:e9:55:a9:03:a0:c1:90:76:9b:
d4:4e:9a:8d:59:c5:a9:b9:6e:c8:01:f7:32:40:82:
a0:ef:f1:34:4a:53:72:0c:05:38:3b:9d:cb:29:75:
6b:67:85:10:ff:cb:0a:7d:78:61:3d:c4:a8:8c:9e:
e6:f5:4a:cd:f8:ae:db:28:e3:b6:5d:31:8c:7b:7e:
18:30:3e:cc:3c:34:3b:b6:07:cb:bc:82:c9:39:ee:
fb:7f:3e:04:b3:5a:13:f0:f5:19:da:47:46:1b:3a:
15:be:37:53:05:97:38:c1:08:a5:d8:28:0a:bf:82:
ab:45:c3:eb:0d:6f:fc:71:97:5d:50:13:39:74:86:
07:f8:97:f3:ad:3c:05:3b:ae:90:64:97:ac:b3:45:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:B5:BF:CC:40:BF:C2:4C:DB:66:F3:D5:50:DE:FF:E9:FF:5A:FB
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c7:0d:46:29:73:bc:01:5c:63:98:17:03:e4:e9:6a:b1:80:
45:36:1e:a0:8d:57:a0:33:a3:fb:80:ff:5f:b5:81:3f:37:b0:
a7:40:7f:38:fe:a6:85:dd:b4:08:8d:f0:3c:83:8b:58:82:24:
26:87:a4:dd:00:c6:ee:52:68:7a:c7:2e:50:4c:db:d0:b6:d6:
cc:f1:fd:43:b9:cf:e0:d0:4b:94:c5:66:c4:37:13:db:41:39:
72:87:0e:fe:3d:59:91:d7:a1:e8:a0:91:1b:cc:a4:d0:8b:94:
db:44:e0:f9:e6:8d:43:19:59:10:c1:e1:b7:aa:48:46:37:5a:
d3:22:9a:ac:f8:4b:14:97:8b:b6:d7:76:44:20:8d:4f:b6:12:
5e:d4:3a:2f:d5:14:19:d8:7f:8c:c4:6e:10:1e:6e:2e:e7:97:
b6:d3:f5:63:0f:db:94:91:6c:5c:f5:f3:37:31:62:44:82:ea:
b8:ac:3f:52:e0:40:68:5c:f2:87:f0:4f:fd:a8:dd:10:b9:18:
62:d0:81:1f:18:90:49:5f:97:b8:15:c9:af:70:82:94:db:05:
f1:43:b4:9b:fd:c7:a9:45:fd:d1:92:de:be:19:0a:43:a5:78:
e4:1a:3c:3e:96:36:5d:8a:92:19:29:b1:cc:8c:a1:76:1a:12:
dd:a5:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:30 2025 by rpki-client