Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: 07kDBrZ0BVte6IZV0VsdBIuEKuu2fNnj6+Ht6EDF9ew=
Subject key identifier: E9:CD:31:D5:C1:7D:89:D2:9B:40:A3:03:39:2B:90:86:6E:B2:08:3C
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0198D4E0A049EEB7557C1802953C0678B48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 029A
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: 4RjmCqDvmoDAJaif+hpsMyxJjgOYqOA0qPLWbo+8Tcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a0:49:ee:b7:55:7c:18:02:95:3c:06:78:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=e9cd31d5c17d89d29b40a303392b90866eb2083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:d7:c5:54:e8:8a:45:87:75:0c:37:5e:29:
fc:cf:78:df:75:78:91:58:b0:60:8b:fa:cd:9b:7e:
1d:03:33:57:9f:5a:93:4e:93:7f:ba:eb:6a:8d:c1:
79:64:62:a0:9a:21:94:ea:22:6d:c9:a8:ad:aa:9f:
16:73:bf:4a:69:13:a5:9c:e1:8b:85:ed:f9:f1:ca:
b5:4f:96:43:7e:4e:ce:21:c3:87:36:89:70:ab:50:
6a:d0:95:66:d6:f8:62:b3:c4:bd:88:ef:4c:d4:52:
55:3b:77:89:1b:2f:ee:0c:d5:56:a3:d4:0a:d6:e4:
e6:2c:1b:f2:fb:cd:9c:f0:21:b8:99:48:30:00:c8:
8d:5d:62:1c:ed:c7:95:ea:b5:94:71:52:26:1b:5f:
ef:12:dc:9a:17:e1:23:8a:c8:e3:f7:b1:c4:26:56:
c6:7a:4a:00:46:26:33:93:3d:15:7f:c5:1a:ed:5c:
27:a2:13:84:83:82:49:9d:64:f5:34:55:79:ad:01:
a9:c6:f2:c5:75:0e:cc:ab:33:bc:50:94:49:8a:34:
32:98:7c:07:f5:b0:70:af:56:49:e0:55:37:94:eb:
fd:5e:6f:79:7e:d8:93:e8:5e:b1:98:03:8a:5f:94:
dc:3e:0f:13:5d:35:e4:43:59:8b:50:ed:9e:62:5d:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:31:D5:C1:7D:89:D2:9B:40:A3:03:39:2B:90:86:6E:B2:08:3C
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:19:1d:d0:ae:e9:f3:94:a2:5f:57:15:26:f1:43:3e:59:25:
61:d0:5c:f8:ab:20:5e:e1:83:ed:31:10:89:c2:df:3c:8a:72:
90:73:20:3e:4e:b3:ef:4d:3f:a8:39:cc:9e:f5:5e:12:0b:b6:
a3:7f:b7:4b:c4:29:fc:fc:d1:52:35:0b:d7:03:a9:45:d1:9b:
01:bc:0b:5d:14:c3:76:f3:c0:2a:0e:1f:55:71:5b:b3:dd:29:
6a:45:f2:dd:d0:c3:23:bf:73:63:45:57:cc:9f:93:b8:76:4f:
79:1b:99:eb:38:20:78:bb:e3:42:1a:d4:94:20:3f:67:12:b5:
25:01:70:39:18:51:db:27:eb:87:ce:5a:e4:93:de:6a:8b:8b:
67:18:f9:ca:b2:26:23:9f:ea:50:44:2d:e3:8d:c6:c6:3b:62:
a9:6f:6d:ca:bc:12:58:96:60:83:2a:68:91:87:a3:fe:0f:ba:
b5:b8:a3:e5:e5:a9:3b:9a:bc:05:dd:c0:86:3e:58:b2:4b:56:
d8:61:b8:95:30:2f:86:4f:73:23:41:0a:8b:a7:9c:d4:29:72:
5b:31:f4:35:a3:b2:b2:8e:94:ca:48:4d:f0:e5:86:3e:46:f3:
1f:1c:31:34:22:24:a7:38:28:52:c6:2b:c0:16:e1:0a:9e:2d:
b1:8b:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:37 2025 by rpki-client