Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: sSKEbZEvTQ2O6TKQr0kXI9FrBSyJjwdq8cqWP+2zJl0=
Subject key identifier: 89:E8:97:C4:BC:EA:A6:2E:55:57:87:91:C0:61:1C:00:E9:75:38:11
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 0198D404C9F96961B60009814D25AF8FA0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 11CC
Signing time: Fri 22 Aug 2025 23:02:20 +0000
Manifest this update: Fri 22 Aug 2025 23:02:20 +0000
Manifest next update: Sat 23 Aug 2025 23:02:20 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: 0A8ZzDbOjCf+Ui/XL+YGSAf2r5mTZnoYVZciRW4EDH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c9:f9:69:61:b6:00:09:81:4d:25:af:8f:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Aug 22 23:02:20 2025 GMT
Not After : Aug 23 23:02:20 2025 GMT
Subject: CN=89e897c4bceaa62e55578791c0611c00e9753811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:1f:f3:5f:70:8f:69:52:67:49:4c:81:eb:
34:ad:78:99:c9:ff:fe:0d:cb:fb:ca:ff:b0:ea:dd:
d3:8c:d3:b5:a4:27:5a:47:aa:27:3a:66:c7:c4:a9:
b7:41:44:08:33:36:40:66:5b:3a:0f:3d:83:6b:51:
d2:dd:3b:97:9f:09:1a:16:32:b0:38:eb:26:6d:aa:
ad:c8:3b:89:91:bb:39:ca:e5:94:c2:7b:6a:3d:19:
09:d8:2e:50:46:7f:5c:65:74:29:15:a1:dc:9d:d4:
79:94:22:00:ae:27:7b:b4:db:5b:fc:16:f1:1c:59:
cb:df:3b:ab:f3:05:1f:2c:15:c2:cf:12:34:38:bd:
f1:dd:61:05:04:0d:c8:37:9b:f3:65:11:80:d1:af:
54:d4:2e:67:f0:13:11:71:83:47:f2:f4:77:8c:f0:
bc:4c:9d:b2:e6:18:18:76:81:ab:ba:cb:9d:fc:7b:
c7:71:a1:79:16:c6:23:88:68:af:a8:9f:d7:d2:e4:
4f:97:52:b5:3d:46:5e:84:10:e2:11:47:9c:a2:0c:
19:36:a3:2b:aa:3a:17:85:0e:0d:fc:62:bc:36:19:
be:37:3a:27:f5:dc:40:4b:86:ed:da:8b:ee:ce:25:
03:0e:7a:fe:a4:0f:3a:8b:b5:a8:aa:70:5a:ab:10:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:97:C4:BC:EA:A6:2E:55:57:87:91:C0:61:1C:00:E9:75:38:11
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bf:3c:e5:9e:72:27:ed:55:2f:a0:17:af:35:3d:4e:15:9e:
d8:e2:e2:cb:4d:26:d7:a2:f6:6f:5f:3d:b1:97:da:82:e9:17:
22:54:fe:ca:29:39:27:3b:4d:ee:1c:1e:64:62:8b:b8:00:68:
91:38:73:6b:ef:69:82:ef:2b:44:81:fa:ad:46:3f:a2:99:38:
b0:8a:cf:02:69:0e:9a:31:05:d1:fc:d6:3b:49:ac:69:d9:59:
c2:44:77:d5:25:c7:6b:5f:07:71:b2:8d:51:6b:94:c0:c4:d2:
9d:81:c5:db:53:b9:80:f8:f8:21:ce:5c:f9:6f:b6:36:82:a0:
a9:00:54:30:51:35:53:e0:11:55:c4:0d:5f:fa:b7:b7:69:e5:
76:ad:3d:15:19:a2:d6:22:0a:87:4b:6d:33:0a:32:6a:14:92:
22:06:88:4a:fd:46:97:c7:81:fe:94:b8:dd:7a:67:97:81:5d:
89:6a:61:f2:8a:5d:3f:55:c5:57:2a:54:ce:02:00:2b:ca:6d:
de:d0:07:25:34:73:67:f0:38:73:2b:80:dd:8c:78:01:3b:2e:
7d:f2:7c:78:c6:b3:f8:4b:6b:05:b5:3e:8c:fc:b0:63:16:8e:
db:d4:12:19:c7:0c:0e:6c:38:2c:a7:bd:b9:63:68:e0:53:ec:
75:44:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:34 2025 by rpki-client