Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: p25uw3wEpIzm2LkFUOKpKUIIZevduFl8znTEEyo8wBY=
Subject key identifier: 37:E7:A8:60:13:A8:99:F3:99:E9:94:68:67:22:D6:52:12:5A:15:20
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0198D5F1BBF618D3F46EFFE92355E862BE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0BFC
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: lkmv8opvI51Hl4BEXak99KYSKi4RoD6oTwUjEUsQm1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bb:f6:18:d3:f4:6e:ff:e9:23:55:e8:62:be:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=37e7a86013a899f399e994686722d652125a1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:af:ca:70:97:f4:ab:f5:42:80:13:39:21:
9c:0c:e7:a8:1b:ac:51:4f:02:5a:d7:25:e8:02:57:
12:11:f4:00:aa:9e:ee:2a:6f:7e:93:9b:47:0e:fe:
ce:e4:a4:0d:e4:5a:06:dc:cd:cd:47:d9:ac:ab:dc:
bf:b7:34:ae:0c:15:0a:8e:95:5b:12:97:fa:24:ed:
c8:98:59:ba:47:c8:d6:e9:78:04:c3:d9:1a:84:c3:
8b:cd:b7:5d:fb:74:db:78:d0:a0:1b:2c:be:91:3f:
31:40:5f:cb:01:36:a5:c3:ce:85:da:84:b0:1f:80:
ef:8e:27:94:68:55:6c:89:46:df:ff:a1:a1:81:12:
a9:fc:95:21:7d:7d:ce:ad:0b:78:2f:02:7a:cf:29:
94:dd:5e:67:54:07:88:6e:c6:5d:94:34:d7:a2:f8:
df:8e:96:11:74:04:55:09:d0:4c:ac:6f:24:27:72:
d1:64:06:e2:fc:ee:f7:a9:b4:44:1b:16:7e:6a:2f:
a3:77:ab:e8:c9:b2:96:c4:15:aa:ce:c9:21:3f:13:
d6:9f:2d:4f:27:22:2e:bc:ad:97:c1:97:ea:4e:73:
36:3a:c3:49:2d:fb:29:0a:5b:d7:4e:63:43:91:e0:
c3:43:4c:d7:85:8f:0d:3d:57:9b:6f:cd:d2:2b:e8:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:A8:60:13:A8:99:F3:99:E9:94:68:67:22:D6:52:12:5A:15:20
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:78:f8:c3:af:fc:84:35:13:14:aa:eb:5c:80:69:b3:d6:
04:75:b9:e3:24:03:52:5f:c1:3b:0d:62:92:67:21:2a:66:c8:
76:f6:6d:a9:34:07:93:f1:27:34:81:86:11:5e:03:80:17:9c:
c6:55:00:b8:f6:a1:e5:46:de:9b:8d:3f:64:42:a6:b5:42:65:
28:1f:88:e4:f0:51:56:98:39:4e:40:fe:5c:38:1b:14:62:6d:
e3:61:08:9c:58:d1:44:cf:35:99:8a:35:f0:f3:10:c5:be:22:
f3:98:41:68:86:24:39:76:64:d2:14:f1:56:2e:0f:e2:c6:7f:
3c:5c:8c:6f:0f:a4:ef:74:d8:dd:24:68:67:e7:58:21:57:dd:
01:e3:4b:6b:18:99:3e:57:95:1e:c6:b2:52:55:be:60:42:40:
d4:9c:5e:58:57:de:dd:ad:29:7d:d8:22:b3:63:9c:35:e0:01:
5f:d6:9b:c9:c7:84:d0:94:9a:dc:0a:7d:23:33:6d:97:1f:90:
c8:f3:55:62:67:4c:cc:ea:7a:f1:ba:51:fd:c0:ee:05:0b:1a:
02:06:fa:32:09:0d:97:7a:b7:d4:2e:66:37:35:ef:85:5f:f4:
8b:e0:21:98:ef:a8:3a:a9:88:41:74:38:64:1a:fc:22:79:ba:
c1:2c:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:43 2025 by rpki-client