
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: yNUV8S7OFwhC1uSVJEdY1l9GxUqaymJojImDzegY2JA=
Subject key identifier: 24:DB:0F:EF:33:E3:E2:62:83:34:17:91:4D:E0:B1:E4:51:9E:85:A3
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 0198D5157FCCBBDB34ADE9FAFC239253E671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 06E8
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: wy8ZihRDqscqgn+Nc8uHJbGRzscTOtnjbmUAOZ51bvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7f:cc:bb:db:34:ad:e9:fa:fc:23:92:53:e6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=24db0fef33e3e262833417914de0b1e4519e85a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:f4:5f:fa:04:39:6f:cd:53:b8:ca:b9:f9:
45:16:e3:28:78:92:29:4c:3c:23:09:d0:40:a7:bc:
22:30:6f:c1:23:ec:18:4f:ff:a3:d6:d2:73:b7:4d:
c7:20:f9:3f:2c:fc:fa:5e:9b:a9:d1:71:70:5e:4c:
db:f9:67:38:1f:18:4b:c3:8a:72:0b:ab:b8:f5:d2:
d5:2f:8e:08:1e:ff:0c:3f:5d:82:c9:ce:a4:d7:2b:
2f:45:2b:7a:9b:eb:01:38:12:22:43:6c:12:7e:3a:
1f:e8:38:74:7f:ff:e9:70:c9:6c:d0:df:be:06:12:
ea:5a:32:50:e6:d6:ed:b5:aa:6e:9a:1a:c7:f0:76:
e0:99:2b:a4:47:1a:99:b2:35:c0:eb:ca:96:33:5d:
c9:d0:90:f9:9e:f3:d3:ba:77:11:da:12:0b:ec:9a:
41:4c:9b:b2:53:fd:36:7e:a4:bc:be:d2:7a:20:60:
d7:af:cd:93:67:f7:19:26:44:16:3a:66:72:f9:44:
05:ac:b0:a3:e4:99:79:be:49:40:1e:f1:c5:fd:40:
f5:00:1f:57:7e:40:17:73:4f:de:a8:07:29:0f:85:
cd:40:c8:6f:c3:9a:e9:86:1e:58:c4:29:01:73:43:
80:11:0e:68:5e:a4:2f:b6:8e:84:50:18:ed:66:82:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:0F:EF:33:E3:E2:62:83:34:17:91:4D:E0:B1:E4:51:9E:85:A3
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:51:5c:81:68:4f:de:c2:1b:a9:8d:70:c0:26:07:d3:f4:
e2:d8:5e:51:13:89:b7:c1:7e:2e:9f:35:4b:d9:ca:e1:85:2c:
64:e8:51:b9:dc:cf:be:1c:87:8d:3e:67:61:71:04:76:9c:5b:
87:60:b7:f2:15:0f:8b:61:d2:eb:83:89:86:60:4a:21:7a:66:
4c:3f:37:49:21:e1:ad:01:68:53:74:dd:83:05:07:9a:43:ab:
64:e0:24:38:62:e0:60:0d:6c:17:6e:4d:06:6e:43:5e:bf:ca:
f5:d8:e6:08:85:05:bb:01:1c:22:f4:05:ec:20:1d:0a:58:c3:
c9:f9:73:dc:64:e2:3f:ba:64:e2:31:37:45:43:d4:6e:fd:ed:
d5:82:bb:9f:6f:fc:07:1e:9d:b6:d8:ad:f0:8a:0f:a7:22:8b:
ff:2b:77:a0:5d:01:e6:98:66:e6:cc:83:b4:96:ed:9b:37:91:
54:95:95:b3:d9:87:4e:3c:56:cf:f3:d3:91:25:83:fd:ee:0d:
85:b7:2c:29:de:33:04:37:8f:e6:4f:58:b1:ca:f0:17:d7:e8:
61:1b:0e:1c:d4:87:e3:4f:59:c9:e7:78:81:20:d5:34:a7:26:
42:8d:39:22:97:65:be:3c:d1:c6:72:db:7c:1b:60:83:7a:33:
75:b4:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:22 2025 by rpki-client