Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: 6zg6xOTREGNu+EpOvnghMPCdJ7VIcko8JanAeYv79Kg=
Subject key identifier: B2:27:D6:37:AF:E7:FF:5E:B9:25:17:A6:3B:88:65:21:38:0E:AE:AB
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 0198D404549F507D20317F61E5FB6E9D2A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 0126
Signing time: Fri 22 Aug 2025 23:01:50 +0000
Manifest this update: Fri 22 Aug 2025 23:01:50 +0000
Manifest next update: Sat 23 Aug 2025 23:01:50 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: Yy+QhphtHTnwhyXrXytr3Aw/AJWiip1bTXIBQn7h7HM=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:54:9f:50:7d:20:31:7f:61:e5:fb:6e:9d:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Aug 22 23:01:50 2025 GMT
Not After : Aug 23 23:01:50 2025 GMT
Subject: CN=b227d637afe7ff5eb92517a63b886521380eaeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:05:c6:f3:b2:f6:04:18:f3:34:cb:d0:2d:
77:8f:f3:79:80:3c:44:17:cc:26:d1:7d:0d:a3:65:
f5:07:c5:48:33:82:37:e8:e9:c9:1b:6c:d5:b4:d7:
c1:89:03:b1:6a:e4:c8:26:1b:6a:6f:2c:2f:cf:f0:
8f:e8:0b:b7:fb:b1:99:d1:ae:bb:c7:6f:e9:5e:8a:
ab:66:44:5b:5d:38:79:be:b9:20:5c:e0:95:0f:9a:
40:41:a7:31:fb:af:e8:bd:a3:dc:2d:8e:8b:64:84:
b4:59:1f:7c:c0:1b:79:d6:e6:31:e9:dd:0e:9b:7f:
6e:f1:a2:0b:9d:eb:40:d9:66:ef:0b:ab:02:8b:46:
ac:bd:d3:4b:61:13:7e:0e:e0:d2:b2:39:fa:58:2b:
ae:2c:63:db:08:ec:46:45:e6:df:4b:8f:e7:37:6c:
f1:fb:b6:74:4a:5e:a1:0e:33:2b:d8:45:2a:5e:12:
0d:5c:b3:58:1e:b2:aa:33:6a:c8:56:38:3c:5c:c7:
7e:c5:02:53:47:6b:e8:fb:a2:f8:e1:26:1c:05:62:
88:96:86:ce:f3:7b:16:72:99:93:78:a8:3d:5e:ce:
bd:7b:39:b6:5a:c4:3f:b1:24:02:92:7c:8e:55:ce:
60:84:0c:7e:98:f1:28:6b:17:8c:1d:70:de:5d:f2:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:D6:37:AF:E7:FF:5E:B9:25:17:A6:3B:88:65:21:38:0E:AE:AB
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:55:92:fe:ba:88:8f:57:ea:81:6e:f8:17:d2:48:00:d7:
d1:2d:00:44:50:9f:25:84:e0:1a:7f:66:05:da:9c:36:12:69:
9c:7a:b7:8d:7e:6f:af:62:11:3f:af:2b:12:84:ce:10:8d:4d:
96:80:2d:5d:82:12:e4:e6:66:9b:f7:d9:dc:21:60:14:b9:b3:
1c:16:f6:a9:fb:87:ed:af:4b:3d:30:48:e6:92:87:f1:3e:cd:
e9:ef:ec:15:e5:04:5f:13:5e:48:91:86:27:a1:ae:cd:ce:b7:
81:0e:38:9b:73:9b:42:02:b4:a4:7c:c9:88:5a:9d:e0:c8:92:
57:af:37:eb:04:21:ae:6d:96:4b:aa:a6:80:83:dc:ca:3a:65:
f4:46:a1:fd:68:d3:ce:5b:39:21:c3:18:29:f4:d3:e0:b3:35:
82:b3:24:bc:80:3d:4f:70:f8:e4:98:67:27:11:c4:e4:23:aa:
dc:a7:60:e8:86:e1:1f:95:89:61:49:57:76:09:fc:94:cd:1b:
04:9b:99:73:31:de:e1:fc:3a:f8:66:bd:2a:09:92:b4:50:01:
65:5e:98:77:c6:81:d2:8e:51:77:ed:ca:20:12:d8:d2:2b:a1:
6b:17:4e:39:33:b7:10:e7:d4:a6:ba:05:37:45:db:1c:3e:8b:
8b:18:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:05 2025 by rpki-client