Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: oiYaMAK3ABwyEvZPwPSkwCoF71cd3L4G/ctcOSIsfx4=
Subject key identifier: 9D:02:F7:65:1C:0B:84:C0:5B:68:2F:F2:65:B0:D5:B7:84:02:24:CF
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0198D4E09E66A12F647E6EE415B8D6B0A8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: 4RxWMMtvNIJD6IvmbEirKf+ELzao0DzLcdySdMWg9LE=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9e:66:a1:2f:64:7e:6e:e4:15:b8:d6:b0:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=9d02f7651c0b84c05b682ff265b0d5b7840224cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:98:8d:fd:05:3b:a1:f7:60:83:4d:27:ae:
4d:21:58:be:b0:61:eb:54:d8:e0:76:50:9c:92:5c:
de:5e:30:0c:a8:c2:56:7c:98:fc:02:bc:9b:14:ef:
b7:92:8d:0e:af:ce:2d:91:0d:05:03:fa:43:1b:9a:
3a:a3:a1:26:16:d2:b8:27:13:40:b9:8d:d0:98:40:
8b:3a:36:dc:c6:c7:38:7b:6f:1a:00:a1:82:45:4d:
2b:12:a9:28:cb:9a:a3:19:9e:82:33:2d:3c:37:0b:
ea:af:44:c4:c1:b7:87:e8:07:d4:9e:3d:79:97:ac:
30:18:ff:0a:e9:25:b7:3e:3d:97:14:fc:09:0e:71:
06:db:9f:b8:c9:43:b9:62:77:72:51:41:15:84:f9:
a6:df:1e:ed:62:d9:64:53:ef:65:36:e6:45:ce:0b:
44:1f:09:d9:a9:3f:61:15:b8:03:a6:19:bc:86:c9:
80:15:df:bd:4c:ac:77:e2:1d:40:8b:fa:32:99:a5:
6d:fe:cd:30:e9:da:15:44:18:60:da:6d:68:11:fb:
52:11:4d:54:b8:8b:8c:54:8f:c7:1f:de:fc:61:00:
9c:2f:ec:33:75:56:90:d1:b3:ca:76:2a:2e:50:b0:
f8:5d:5e:8b:ea:ce:3d:01:e8:bf:1a:b9:50:0e:5c:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:F7:65:1C:0B:84:C0:5B:68:2F:F2:65:B0:D5:B7:84:02:24:CF
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:a7:14:cf:a9:0f:c8:9f:3f:41:e8:e3:4c:3f:95:65:f4:97:
4f:44:c2:b1:c3:87:fe:0e:75:17:e7:34:70:32:0c:bb:46:a4:
ad:71:c5:5c:0b:42:34:2a:b7:ac:2e:f4:b1:a3:c8:76:04:a8:
f2:12:d4:c2:5c:8d:95:24:1a:29:3c:8d:ef:e3:de:60:a6:db:
96:f8:b5:49:82:14:77:8d:d1:56:5a:ee:5c:f8:ed:64:43:ab:
bd:5d:87:dd:11:5f:0a:01:2e:ca:52:e2:de:54:86:cd:8d:cc:
34:5e:7c:82:91:25:44:1d:cf:45:74:fc:40:9c:6c:a1:46:7b:
e1:37:f1:8e:c8:6e:ed:8c:43:4a:05:02:41:9a:97:da:91:34:
f6:8e:af:9f:0f:5b:04:dc:04:24:ac:d6:11:56:e1:cf:b2:8f:
8f:e5:80:4a:a9:83:a4:e2:9b:7b:19:f3:91:6b:a9:4f:29:2d:
63:6d:f4:62:88:e9:33:50:a4:63:c5:a3:53:b6:26:d2:7b:73:
b3:14:5c:d9:1a:de:90:90:0d:b9:27:2b:89:88:c2:05:f0:dc:
ed:c1:df:ec:24:ce:13:44:73:45:7e:a3:25:52:f5:9d:f0:ed:
5f:c9:7b:bd:6d:73:df:0d:a9:1f:fa:48:1f:e1:01:87:1a:6d:
28:20:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:23 2025 by rpki-client