Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: 9we9scPTGBPgN5ZQueVyUqH+24XbR+3jdxZbjJ0OvCY=
Subject key identifier: 26:08:1B:BB:E5:AA:BE:6F:1C:A9:4F:00:97:F0:56:01:10:60:FD:AB
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0198D6618B92A7087098C73F148B834A028C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:53 +0000
Manifest this update: Sat 23 Aug 2025 10:02:53 +0000
Manifest next update: Sun 24 Aug 2025 10:02:53 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: NVvunmnAb9tvIpA8yrmwJtCDnwTx9nvqwhOh/Uka7J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:8b:92:a7:08:70:98:c7:3f:14:8b:83:4a:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Aug 23 10:02:53 2025 GMT
Not After : Aug 24 10:02:53 2025 GMT
Subject: CN=26081bbbe5aabe6f1ca94f0097f056011060fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:6e:14:f4:b6:0c:da:a2:ce:ed:ea:24:dc:
5a:9e:af:c3:bd:a1:41:98:d7:4f:ae:7c:29:cd:f5:
4a:5e:48:e6:5a:25:33:b2:51:ec:a8:98:c7:b2:b3:
7f:6b:e4:4b:04:f3:c8:6e:bc:7b:67:5b:bd:73:7f:
99:8b:61:0d:8c:e9:35:7f:34:2f:0e:6e:ad:18:e7:
d9:a7:79:97:72:db:10:92:75:12:e9:e9:ae:06:e3:
07:9a:29:02:75:13:0a:6a:f4:e9:c2:a9:30:7b:25:
88:4f:7e:40:d5:2c:5f:fd:14:e8:4f:0a:84:84:c0:
10:69:d9:15:cc:7f:9b:20:62:5f:27:b8:5a:e4:60:
85:de:be:54:3b:52:46:78:12:a7:47:08:7a:da:85:
ff:d9:eb:0c:51:d6:46:86:3d:f4:3a:26:29:fb:b4:
27:9f:99:21:39:e6:35:45:0b:63:be:aa:88:3e:42:
e6:67:4e:85:8e:69:22:6f:51:88:f3:83:34:11:b0:
33:7b:f2:54:4c:85:2d:4f:de:d6:6b:d9:a8:9a:f1:
27:ef:b8:a7:87:6a:55:d7:99:98:78:ed:6c:e1:46:
80:64:fc:b7:d6:b6:e0:91:af:e8:68:6d:15:65:37:
ee:a0:78:75:fd:d4:28:fc:a7:c0:61:7c:ad:23:39:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:1B:BB:E5:AA:BE:6F:1C:A9:4F:00:97:F0:56:01:10:60:FD:AB
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:bf:d9:ab:cf:95:5c:4e:dd:82:ee:04:a5:e8:28:a6:58:
a6:de:0b:1d:05:83:73:32:d8:3c:7a:61:ff:b0:1e:0c:cf:d8:
25:9a:60:e3:3d:b5:ad:8f:eb:11:e7:23:51:41:3d:80:17:2b:
39:c0:48:81:70:d3:80:f1:c4:a6:32:65:cc:de:ba:84:56:70:
ba:52:f3:ac:2e:b4:99:0f:2d:df:0e:b5:bd:de:e9:a1:74:c0:
8f:68:70:cc:23:aa:7b:9b:5b:c7:83:2b:ad:63:3e:6a:5f:0f:
1f:c9:1a:dd:9c:91:59:e9:c5:bd:8d:37:a2:fc:2b:e4:da:35:
4f:78:2a:de:00:d0:58:1a:1e:b2:18:6d:15:c5:f9:64:60:9f:
64:32:e3:36:1d:e6:ae:be:00:f8:99:0f:93:a2:33:0b:36:4e:
b4:cb:ef:45:ce:11:ef:43:0f:75:60:25:97:89:c1:e8:c2:2b:
fa:20:0b:fb:92:3b:15:e0:3b:7d:a6:6a:6c:b3:05:af:fb:85:
38:ce:bb:d3:35:b2:1d:5e:9e:d9:4a:98:1d:39:88:0b:23:93:
a2:d6:cb:82:6c:d3:14:33:9f:96:80:87:7c:ec:da:7d:5b:6c:
03:7e:4e:7b:fa:43:d5:0f:ae:79:12:45:67:63:27:14:fa:8f:
f5:8f:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:03 2025 by rpki-client