Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: fgaFIGksQYw1Y9ucWEtwXTp5yXcvwT33y+PjI3k6kr4=
Subject key identifier: 5A:ED:8E:91:6B:1D:82:A5:B4:8A:A3:34:E9:A8:6C:83:47:BF:E4:18
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 0198D4738AB53F6B9C4D809B27E1DDA8ACD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: tQM+K8AEA42ZAeV0izTzHR9qgyw/9JuslAsoi7UwTJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8a:b5:3f:6b:9c:4d:80:9b:27:e1:dd:a8:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=5aed8e916b1d82a5b48aa334e9a86c8347bfe418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:0d:9b:67:83:49:df:95:e4:5c:3c:aa:d2:
da:c7:d4:4b:22:4c:e4:2b:b2:20:b2:90:05:e5:55:
01:54:7f:08:41:77:5f:91:45:3b:bd:77:56:06:b8:
1d:25:51:6b:d1:ef:e1:1c:d5:5c:dd:65:65:4c:24:
44:d9:83:53:79:e9:ce:d7:90:47:d2:f2:f0:cb:4f:
4c:c5:2e:df:47:65:35:ce:d1:4e:79:b1:c8:66:a1:
b6:da:80:72:d2:ac:43:0a:d8:8f:9e:8d:61:fe:f1:
a3:ed:5d:d6:42:dc:8c:23:1b:b3:7b:2b:72:56:04:
23:f7:3c:8e:fc:be:80:3b:73:f0:ea:8c:0e:d8:49:
2d:f3:bd:2e:3a:c1:90:58:83:69:43:97:c0:c5:52:
63:52:f9:b1:73:c3:a3:e0:9a:d9:85:61:24:88:88:
15:d5:6d:0a:f8:a7:82:65:ad:66:1f:57:d2:ed:00:
d3:23:3e:3a:dd:57:d3:9f:f1:c8:64:93:c1:41:38:
d0:d8:21:01:c1:34:98:88:a4:34:38:e5:ba:03:b0:
d3:73:86:e6:16:ae:d1:6c:22:f6:2d:ba:08:e0:79:
b9:31:e7:40:f8:ff:76:b0:e1:21:02:a6:26:3c:59:
bd:82:e1:2a:c5:5d:27:5d:33:d6:80:a2:a0:5a:7d:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:8E:91:6B:1D:82:A5:B4:8A:A3:34:E9:A8:6C:83:47:BF:E4:18
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b2:a0:2e:ba:e3:2e:9d:fa:b1:d4:45:18:d4:e7:c5:bb:51:
7c:4f:15:b2:d9:89:bf:8f:ef:37:fd:3b:9c:e2:39:59:48:44:
8e:ea:6f:81:14:3c:71:22:34:58:90:ad:21:bb:b1:f5:d3:b1:
95:01:b2:43:d1:bc:58:81:7a:ae:18:cb:e6:e0:d6:27:14:89:
33:17:58:d7:70:be:22:ce:ea:86:fe:05:ea:18:2a:fd:73:4a:
38:f7:88:e2:5c:49:e2:3c:ee:20:10:cd:b5:fb:8b:67:9c:1a:
a3:43:e8:39:e0:e0:0e:6c:f7:ef:fd:9d:62:b2:b2:cf:05:60:
e0:ff:2f:2f:6e:9f:53:97:a5:cc:68:05:65:c6:1c:dc:8a:6b:
51:73:5d:03:c5:21:a0:d2:36:a7:65:9d:fa:d2:ef:71:a6:b7:
cd:b5:56:a1:e4:e9:2c:0f:3a:d9:4b:37:be:d9:74:ac:5d:07:
0a:b0:06:b7:07:44:0c:c0:7d:b8:a1:eb:9f:d5:69:1f:45:2f:
19:44:88:b6:74:8d:05:93:6b:af:97:05:34:07:e2:17:01:ae:
0f:0f:89:be:1b:b8:d0:12:54:99:39:c0:49:1d:aa:97:d7:22:
34:8f:3c:3f:f9:75:00:97:fc:7b:0e:a8:36:82:3a:7c:53:37:
64:8e:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:59 2025 by rpki-client