Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
File: zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft (raw, json)
Hash identifier: 49LEybpUd4LH6hhNdVZqIS5TacpnAflU62ZEbCxji4s=
Subject key identifier: 4E:A2:DA:9C:9F:CC:8D:D5:B6:C6:3D:7A:06:39:E1:89:57:98:B1:53
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0198D66070A4A5C5D53692D9421C5BBB2330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
Manifest number: 15E5
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: YqsIJO2_ffnr84dFD6FPVdm33CU.roa (hash: pxoJD8X1pGpkVmBMQ12ROsjSsHVTYIEf7xsdsWhn70g=)
2: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (hash: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=)
3: zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl (hash: l29KgQ9WJd0giAPYTiT9OEiDsgeTJp2pbAEpyhRpkMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:70:a4:a5:c5:d5:36:92:d9:42:1c:5b:bb:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=4ea2da9c9fcc8dd5b6c63d7a0639e1895798b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:d6:c3:c5:f9:b7:bc:8d:8b:60:14:6e:ad:
d7:fd:59:3c:c9:4d:42:fc:bd:c3:53:d6:f3:63:17:
33:a5:e0:7b:d4:48:bd:1d:66:85:d8:3a:4b:fe:9e:
db:78:26:b0:c5:ee:27:d0:1c:67:77:9a:c0:f9:77:
29:5b:55:88:88:3b:98:a7:aa:88:30:e4:7d:71:29:
6a:3e:13:a6:60:a4:68:77:bf:ca:c4:36:59:95:d6:
97:91:67:8f:3f:8e:f6:8d:13:da:be:d3:8f:7d:73:
c5:b4:d1:a9:18:c5:c9:4f:6d:5a:e9:28:ca:ec:2e:
3b:bd:ae:a6:5b:1d:3b:fb:79:07:26:9c:52:21:d2:
9f:42:10:e0:5c:e3:4e:fa:9c:a7:bd:fa:c6:18:ab:
b1:86:ab:89:d2:c4:14:4f:bc:8c:8f:31:58:1e:5b:
50:8d:1d:4e:00:ec:1c:be:1c:ed:81:58:de:a1:92:
22:c7:9e:ea:67:29:0e:26:aa:e7:b4:c3:ce:ca:92:
98:61:09:ff:56:bc:30:62:71:6a:be:39:76:8c:44:
9b:bd:91:a6:a0:c0:cb:a7:a5:d3:8c:db:d9:19:be:
ff:0a:0b:6e:c8:be:1e:63:3e:46:5f:da:61:29:1b:
82:54:2d:7c:c0:70:29:dc:9a:9c:85:cf:7e:01:75:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:DA:9C:9F:CC:8D:D5:B6:C6:3D:7A:06:39:E1:89:57:98:B1:53
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:1b:59:1a:b1:40:f5:a6:11:f3:ac:a3:55:f9:06:68:fb:
72:8b:bb:5d:75:a5:63:4b:1b:d5:86:a5:dc:f1:c7:65:f5:41:
4b:08:f4:15:94:15:d5:93:71:40:16:29:96:fc:03:c9:fc:56:
44:60:12:41:57:5f:05:e3:37:fd:40:a3:e7:5e:d9:cf:9f:27:
4e:c4:9f:3a:7c:77:ef:a1:ef:36:a9:87:f3:c0:bf:74:62:02:
ef:48:0e:24:ac:13:99:22:3c:a7:ff:e6:ec:16:c6:63:28:fe:
2f:58:cf:26:73:24:40:b9:64:94:df:c4:73:f6:64:8d:f0:b8:
2b:33:21:94:85:97:18:6a:f9:82:5a:27:bd:e3:d8:d6:ca:3f:
77:63:94:e9:93:27:59:85:e3:4f:ca:d5:51:1e:07:59:bc:be:
94:0e:59:d7:60:5a:16:4e:8d:af:6e:0c:bb:5a:c3:ab:a5:e7:
58:dc:40:b2:97:69:46:17:d3:11:bb:6c:8d:26:ed:53:15:ba:
10:07:7b:6a:93:1c:98:c4:a4:57:7d:90:e2:d3:50:c9:f3:4d:
8e:7d:aa:fb:50:60:52:ca:d4:9c:dc:ba:23:46:d2:18:6e:7d:
42:b9:3d:9c:e9:c9:af:b2:8d:68:fc:57:00:fd:2c:d4:bf:66:
24:2c:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:50 2025 by rpki-client