Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: 5UXbxMvHfRhfg+9Jq+wnXxmB50N53c0vEkoumc2Pnwk=
Subject key identifier: EA:8E:9D:E1:AD:1F:3D:F2:6A:2A:01:A6:A7:61:02:F5:BB:22:6C:18
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0198D4A7E39A9449EDBDB1A79B239B46D35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: eDQSU7HhUC/ayWc+OWRZ9I6yRaMmkgWtUpuh1fHXKiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e3:9a:94:49:ed:bd:b1:a7:9b:23:9b:46:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=ea8e9de1ad1f3df26a2a01a6a76102f5bb226c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:ee:6e:43:d0:58:c1:4e:93:26:1d:92:34:
29:42:32:c2:2b:1b:0a:f2:a7:33:fb:84:35:c0:cd:
f3:ee:40:3c:a4:44:18:5a:c5:dd:ef:49:da:14:1d:
6b:8b:80:a5:33:0b:2d:98:e0:3f:e4:82:1d:0d:fb:
b0:4b:51:00:19:a7:ea:32:9e:0d:2f:a6:c7:11:c6:
71:fa:ea:5c:56:16:ee:6e:b8:69:2a:71:83:d3:31:
25:5a:52:67:18:00:fe:29:ed:cc:dd:22:58:43:2d:
4d:47:72:4c:e9:6a:46:4c:ab:29:13:51:68:95:06:
3c:a8:b7:49:be:da:c3:2c:b1:c6:39:a4:65:a3:b7:
ee:03:be:ad:c3:3b:b9:d0:59:88:39:e2:9a:62:ed:
64:b7:e7:e0:3f:e0:2f:76:b6:39:56:43:47:9d:ae:
ac:92:6d:e2:dc:2a:54:55:54:be:8b:80:bd:77:cf:
28:93:56:99:87:70:c1:6a:6f:34:61:d9:63:cd:2e:
dd:d9:3e:0f:b8:d8:a1:f5:33:24:f8:57:e1:00:44:
36:50:28:92:2d:38:e1:0e:fb:25:33:76:42:d6:4a:
47:ea:ca:19:1a:8f:c7:18:1b:a1:8e:2f:a7:72:3e:
8c:41:7e:5a:4a:5b:fa:56:a0:69:9e:68:e5:11:af:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:9D:E1:AD:1F:3D:F2:6A:2A:01:A6:A7:61:02:F5:BB:22:6C:18
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f4:67:08:d0:13:20:01:b1:12:b6:72:98:37:f3:78:9d:ae:
5c:98:89:ff:95:e1:7f:fc:f1:98:59:8e:9b:82:86:eb:c3:b2:
ff:bf:13:c4:11:5d:01:76:f6:3a:05:f7:2a:18:c2:23:18:0d:
7e:d9:7a:99:19:b9:de:7d:06:e0:93:1a:68:7e:15:a8:83:fc:
19:95:6d:db:47:2b:fa:eb:77:6e:c7:a2:fd:38:88:0c:a2:99:
78:b9:db:32:72:89:40:fd:86:c3:78:89:3d:56:7c:5e:32:ee:
55:d2:f9:9c:d6:ae:23:71:5a:62:e0:65:5a:1d:4d:60:10:88:
de:50:19:7a:1f:ab:84:a0:13:2c:a3:16:50:b8:81:90:e8:f1:
fa:82:de:d3:67:54:1b:dc:cd:e9:bf:d3:a4:bb:27:e9:cc:53:
cf:25:be:b3:14:c0:f6:5a:7a:64:33:64:c6:4e:6b:47:44:61:
7a:87:75:ce:c5:e9:00:11:ae:9a:aa:c4:27:b2:2e:09:41:75:
07:57:89:25:f0:18:8a:a1:54:c8:f2:13:ef:b2:da:85:4d:3a:
ae:ec:30:eb:84:eb:5f:70:e2:20:dd:ec:98:12:0f:82:91:42:
bb:69:b5:ac:7d:46:e7:cc:3a:74:30:6f:7a:ea:48:43:d0:5f:
52:e7:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:51 2025 by rpki-client