Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: RTW/TjAxDTjcW0twpEeLS1F80lSmv7Re5KvLzszCp94=
Subject key identifier: 53:EA:D9:DC:2B:A4:CF:91:75:C3:A5:A6:BE:8E:D8:E9:51:75:18:35
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 0198D4A807F5162D16CE4D39A5F90C215EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 154E
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: mkdojqtaGXosTDCM/7XQIaTJQPvEaA3/aIJG7emyX9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:f5:16:2d:16:ce:4d:39:a5:f9:0c:21:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=53ead9dc2ba4cf9175c3a5a6be8ed8e951751835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:a1:29:b2:3e:fb:30:ae:3e:8d:fc:1a:4d:
5a:25:cc:9d:7f:90:73:1a:34:76:8b:6e:4a:90:1f:
ba:60:f5:4b:58:cc:75:3c:ec:75:e9:f8:03:16:2c:
71:dd:d0:5a:33:f2:d7:c9:b6:f0:06:60:99:eb:eb:
75:57:b5:91:12:93:ad:32:fd:13:e2:42:2c:4b:da:
e4:ac:a4:b0:57:eb:20:a4:30:21:78:77:b3:ff:c1:
68:27:61:9c:20:7f:0f:ff:07:25:2f:b8:24:b3:1d:
42:9d:ae:74:d4:a9:97:01:d4:d0:e3:69:2f:5b:c6:
d0:88:41:cb:05:71:47:3b:4d:b5:66:94:e3:41:b5:
17:28:b1:15:7f:75:60:be:28:9d:72:0a:fb:ba:2e:
4d:24:86:2f:69:54:aa:1e:69:05:f2:df:25:eb:5c:
e5:fe:45:cf:10:66:9e:52:36:24:2e:18:17:24:e9:
23:ae:a6:50:61:99:94:d2:da:b2:bc:e1:9b:cd:66:
79:47:10:8d:df:8d:1f:43:24:7c:82:41:49:64:14:
57:45:01:0c:e6:b0:96:08:9c:c0:ce:0e:42:89:c1:
cd:35:1b:fe:7e:e9:24:50:76:59:71:c7:d0:f2:48:
48:4e:bd:62:ec:cf:17:34:c7:87:0f:d8:a0:ec:44:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:D9:DC:2B:A4:CF:91:75:C3:A5:A6:BE:8E:D8:E9:51:75:18:35
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:89:d0:7b:88:b5:9c:fa:8a:b0:dd:21:c9:a7:71:53:54:
bc:06:11:34:6c:84:dd:7a:19:21:de:2a:19:f4:25:b9:1d:89:
44:4c:dc:f7:d9:5c:2c:db:fb:93:07:10:43:70:91:f1:6f:9d:
03:ab:e2:16:3e:a0:cc:7b:d0:7d:f1:cf:5c:5f:22:19:af:31:
6a:43:0d:82:b7:7f:bf:79:23:8e:3d:eb:6d:a6:48:d2:3f:76:
aa:38:82:1e:94:89:0c:8a:f3:e6:23:06:e5:1e:a5:26:57:ce:
f5:94:99:6a:78:f9:8a:d4:f4:d0:da:af:aa:54:76:36:5a:35:
03:ec:2e:d2:eb:f6:b5:0c:2c:62:7d:b0:1b:95:ac:b1:07:b3:
1f:eb:2d:b1:6e:d1:a8:cc:b5:9c:8e:54:d6:ed:ab:e6:5e:6b:
23:b4:50:99:d2:fb:24:d1:ee:06:ef:cf:57:7b:c3:a0:dc:79:
0f:a8:d1:dc:53:16:6a:c9:c7:93:e8:b5:76:60:8b:fb:f4:5f:
91:48:a2:59:df:7e:0c:e6:3c:3a:65:4a:40:27:f9:10:f8:4a:
e1:2b:2d:a0:ab:99:12:9f:2d:ab:12:12:fd:82:ae:c9:ea:cf:
e4:6e:e0:be:18:f9:5f:f4:0e:a6:0d:02:1d:24:82:f0:34:af:
bf:fb:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:27 2025 by rpki-client