Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: lTSuXcodJhTZ1CQ6JNsfALsC9SVGyYrd2beEDNiebPc=
Subject key identifier: A0:33:21:0C:79:98:7F:F5:B3:7E:0C:CF:E7:4F:82:B2:40:E5:9E:18
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 0198D473A3234AAAABF2049CE81C1B672534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0F9C
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: sGf82JgCk7xA2XGhz2FYrDOPxeNu9XgIczWU7/xW6EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a3:23:4a:aa:ab:f2:04:9c:e8:1c:1b:67:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=a033210c79987ff5b37e0ccfe74f82b240e59e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:c7:79:06:c2:c2:31:8d:42:2b:0e:81:65:
f8:0f:47:ed:ec:5f:94:de:af:0c:14:89:2c:8a:a4:
00:aa:42:cd:b0:ef:5a:7c:63:e4:1b:ae:b1:e7:ca:
9e:69:ca:53:2e:9b:fe:4e:fb:e6:0f:79:a8:73:2c:
18:bc:23:f9:5f:36:51:cb:b9:45:b2:f1:84:1f:94:
7a:b3:d5:17:c3:34:35:ef:8e:ee:46:5b:c4:e1:42:
3c:90:63:05:1b:66:18:df:4c:60:f4:21:63:40:74:
10:64:74:19:fc:27:ca:a3:a0:98:4e:56:13:21:56:
92:ab:de:93:60:2d:1b:5e:6c:54:6a:69:f9:a8:26:
21:87:05:e0:66:3e:14:4d:e0:fb:bb:24:27:09:03:
31:a4:1b:06:9c:60:f9:55:d6:2b:95:f0:44:26:2b:
77:70:16:7b:45:f2:60:f1:8e:57:d4:10:de:55:16:
b2:e1:e6:04:b7:e6:ff:1a:97:2b:b2:ff:ba:24:c8:
a0:6c:fd:89:e0:d8:15:b8:16:24:cd:67:50:c0:e3:
7f:87:7a:4f:8a:b6:30:c3:26:1b:a8:3d:47:d7:fc:
51:2f:a6:5c:22:9f:6c:96:09:68:39:bf:c7:3d:f8:
70:da:19:9f:d3:e5:07:9f:85:5b:81:80:3b:2d:b5:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:21:0C:79:98:7F:F5:B3:7E:0C:CF:E7:4F:82:B2:40:E5:9E:18
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:99:05:53:94:bf:1a:68:1a:86:88:01:f3:dc:2d:46:94:
8a:54:9f:df:de:96:22:8e:e8:6a:01:f7:2b:26:13:d3:f1:2a:
1f:d5:f1:14:a1:74:ce:1a:46:22:f9:e1:31:d0:c6:ca:34:0a:
5a:62:fe:24:4b:88:6b:ba:78:80:9b:b1:9d:3e:07:09:46:20:
82:36:42:f0:ed:ce:16:01:18:6a:c2:b7:65:b5:4f:13:fa:0c:
07:8a:c2:12:fd:13:84:22:65:b4:cd:89:a3:fb:34:33:e2:a9:
4a:40:96:43:c4:4e:30:02:ac:31:14:64:81:6d:3d:8a:87:9b:
6b:3d:db:39:19:5b:69:d3:7f:df:89:a7:28:13:d4:2d:5d:83:
18:46:e3:77:dd:b3:44:dc:97:b1:9c:e3:6b:c9:65:36:9d:b1:
e3:71:42:3f:01:01:b7:6f:01:11:86:4d:5b:83:7a:77:3f:87:
0a:b8:9e:b1:22:76:de:d6:8f:9f:cd:64:ce:c3:30:d7:a5:61:
53:66:f8:43:21:e6:b5:91:4f:f5:b8:b5:96:81:6d:9f:ff:d6:
46:30:44:67:61:af:f2:ae:49:11:47:19:af:d4:2d:98:d6:8d:
1b:e3:db:da:33:2f:42:c9:18:28:66:17:97:c5:7d:d2:68:17:
d7:96:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:01 2025 by rpki-client