Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: sYrUncbp4LQgmhyVvO8xWMfrBiIVEN+AjaWx4XlynDY=
Subject key identifier: 26:7E:B6:E8:97:9C:CD:7B:72:5A:65:35:B3:BF:AB:0C:7C:7C:A7:11
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0197B7B37C7D7A5289A6F73E92DEA2F33C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 081A
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: Y0oynphD2LTXEExaurYYzgJa3wJEz0IifmgCOsKi9+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7c:7d:7a:52:89:a6:f7:3e:92:de:a2:f3:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=267eb6e8979ccd7b725a6535b3bfab0c7c7ca711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:83:3a:c5:83:39:ff:b3:ff:98:23:42:e4:
2c:de:46:65:03:32:53:90:cf:6d:78:e6:52:34:61:
ab:75:c3:3e:99:e4:7f:c2:f2:ee:27:3a:65:d9:22:
e0:3e:af:28:90:f8:18:09:23:6a:fa:91:97:fb:fa:
5d:6d:95:0b:49:b2:18:61:25:f4:5c:39:7c:9f:b2:
cb:df:26:b5:c2:28:eb:58:75:36:3c:63:ab:92:b0:
d7:c2:01:c9:05:13:be:35:45:5d:14:99:35:e2:21:
79:ab:7a:31:80:1d:7e:ec:d9:f7:4e:fd:94:38:55:
6f:de:c8:a9:a4:2a:b2:d2:1b:9f:ef:a0:30:b9:8b:
c8:60:13:00:5d:90:c0:c8:31:c5:66:8c:fc:8b:45:
88:7d:42:7c:9d:8e:16:10:b5:d2:fa:c2:5d:c6:85:
e6:5d:2c:c6:0f:5b:ad:9e:a5:6a:46:7f:db:fa:ec:
f3:01:1e:3f:c3:4e:d8:3b:5e:6b:3b:5b:a2:56:41:
e2:92:46:86:9f:b6:18:cd:f1:8b:bd:73:65:28:aa:
68:db:e2:7e:c9:5a:eb:d5:20:6e:f4:ea:fa:35:ad:
b1:64:14:db:05:be:7f:4f:ab:38:29:e6:cd:d0:b2:
9b:c3:e2:cd:19:db:34:51:c0:07:56:ac:20:af:47:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:B6:E8:97:9C:CD:7B:72:5A:65:35:B3:BF:AB:0C:7C:7C:A7:11
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:a8:e9:c7:8a:03:3b:58:3b:90:0a:56:01:20:16:e7:14:
b9:71:36:30:4a:3b:57:e1:d5:da:cb:cc:c9:51:b1:e7:b7:20:
76:7b:e0:99:15:41:28:69:92:3f:53:3e:be:30:a3:99:68:5f:
f4:a9:c7:cb:65:07:6b:a2:08:fc:d2:6c:3b:f6:94:6e:b1:5f:
34:26:73:8e:f0:ca:1f:14:5f:e9:f7:e4:27:88:fe:e8:30:3a:
c4:dc:49:b2:69:6a:4c:51:19:96:d3:0f:8f:24:1f:4d:0a:62:
07:73:00:16:cc:33:95:12:d9:9b:da:7d:c0:54:ad:27:40:34:
41:1a:19:d0:f6:47:6f:b6:7c:33:62:f6:be:fb:7f:87:65:17:
37:fd:a4:00:bd:a8:3b:80:2b:ca:87:9b:8a:82:fd:07:f8:b6:
9a:ac:0b:14:eb:11:c3:25:fd:90:5b:59:16:a8:be:68:c5:f3:
a1:64:ba:76:93:13:c0:af:e4:e2:49:e5:f3:c3:fb:d1:54:69:
99:af:94:c6:57:e3:80:42:3f:02:fa:4c:3e:bd:d3:e7:4e:53:
8e:4d:ab:78:e9:93:90:c7:b9:21:c7:c4:5c:da:c9:53:46:92:
a6:31:51:80:6a:67:01:02:e4:2b:59:48:f0:dc:c3:db:68:ab:
21:fd:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client