Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: EaCXC1LmYSyHHDJzY/OQPvjDGZ43hQp6mbwKbzf9NFg=
Subject key identifier: DA:D2:D0:F0:22:BB:F1:2C:26:46:8E:0E:13:42:01:7B:70:24:00:BC
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0198D583E81D7DC0257048C5BDD673A401E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 08AE
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: TLpBlE+4zjvtCvPEUeyfuvDYIXZenDJ0MKIXjCidBNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:1d:7d:c0:25:70:48:c5:bd:d6:73:a4:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=dad2d0f022bbf12c26468e0e1342017b702400bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:6e:36:3e:56:d8:35:54:67:86:7a:35:12:
ad:6e:71:cb:97:42:e3:d6:14:30:c0:6d:2d:59:88:
07:e6:07:33:00:79:4a:d0:4e:76:89:60:2f:04:89:
6d:7e:5b:65:3f:94:4d:e0:fa:9b:4f:bb:73:9e:f6:
3a:eb:10:7a:8b:65:61:ea:b7:d8:4d:49:ad:70:fb:
26:45:eb:92:dc:53:a7:4f:54:ff:74:02:57:40:0c:
fe:fd:25:88:c0:f8:79:5c:6f:2d:30:4d:09:d6:58:
8c:bd:b2:60:4b:f1:80:36:a3:54:e6:23:45:6d:c8:
bc:72:04:97:fe:fa:a4:64:6a:0a:18:b5:4c:f5:ef:
94:09:8b:1b:50:27:57:4f:04:ea:9e:d8:76:2d:03:
c2:f0:08:5e:d2:52:6a:a5:26:32:33:41:8a:88:6c:
33:63:b8:7c:d4:ff:0d:06:ca:ae:6d:dc:5d:bf:24:
98:7f:3b:d0:52:f5:85:b4:23:c6:80:cc:3b:d3:38:
90:22:22:1b:72:50:fa:9e:33:9f:bb:ac:b5:f4:1b:
c6:7d:aa:43:71:54:d1:4e:a0:09:74:ff:f2:f8:50:
49:14:e7:49:55:83:dd:08:f3:31:c6:67:44:eb:88:
93:7f:1f:69:38:75:20:36:52:ac:da:af:54:b4:2c:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:D0:F0:22:BB:F1:2C:26:46:8E:0E:13:42:01:7B:70:24:00:BC
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a4:70:b2:f8:ce:93:95:63:cd:ff:81:cb:35:0b:c9:f3:f8:
d1:9e:a4:53:28:bb:af:30:8d:05:98:9d:b6:24:8a:4d:dc:5f:
cd:af:34:3a:d7:19:91:e8:6c:df:51:9c:12:db:84:61:43:73:
40:2b:82:0c:4f:93:43:af:3e:b6:5a:bb:91:ef:a6:f9:2c:3e:
c2:13:3d:1a:74:8f:12:5d:f9:59:10:d7:79:29:f6:0e:1c:57:
3c:a9:ae:eb:d4:94:d6:f8:f0:05:2f:76:e2:c3:5e:6b:18:d2:
4b:b7:81:27:6b:23:f6:46:eb:4c:cb:9d:fc:8f:d6:24:c1:09:
aa:29:b3:b1:d0:07:87:c6:cf:23:d5:08:e8:7f:26:75:0e:df:
c4:c1:b0:96:6f:60:3c:83:b5:21:0e:6a:f0:03:e4:a5:fe:8d:
2a:5a:6c:68:4d:6a:96:54:1d:8a:7d:d3:7c:16:42:cc:09:02:
e1:8a:d4:e9:bb:47:f2:6f:3f:49:3b:9d:52:86:39:ed:73:f6:
a6:6b:e2:29:63:5f:d1:69:34:db:43:7e:40:c8:a5:a8:b0:42:
b3:19:e2:6e:db:6a:64:a2:dc:92:8d:76:7a:8e:ce:c4:71:98:
b4:17:54:f4:cf:b2:12:b3:35:16:ad:c0:65:a0:55:00:68:f2:
7e:66:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:39 2025 by rpki-client