Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: EO1QrojRHVsmzE/u6sKs8sE8tk6xZiVb6BCPWYim/eM=
Subject key identifier: 48:3C:E5:84:3C:10:90:66:16:B1:7A:B0:1C:CB:39:FD:DA:D3:1E:11
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0198D65FB1000B802814E0F069D04F0AEC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0408
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: d3D0/my+OxusFDPA/iGcDMDcv/9uhsUs4D3siyqs7Mw=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b1:00:0b:80:28:14:e0:f0:69:d0:4f:0a:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=483ce5843c10906616b17ab01ccb39fddad31e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:ca:ff:b9:cb:e6:81:5b:e5:c2:11:71:bf:
47:28:87:8c:37:59:a3:51:89:08:4b:7b:36:9b:60:
c9:ae:aa:0d:08:5d:61:b8:ce:21:ad:01:4d:cd:77:
df:01:d4:37:15:f5:4e:a8:68:56:27:e3:2a:51:cf:
e3:09:05:b9:1d:bb:96:ef:cf:33:8a:a5:31:a1:46:
2b:73:14:57:a1:eb:32:67:51:2f:2e:5e:91:00:5e:
2e:76:a9:f6:46:4a:9d:5e:03:6f:47:f6:14:7e:9d:
b5:0a:c8:6a:c7:a7:3a:22:1e:9e:85:2b:f1:0e:d6:
ed:52:67:54:f1:2b:28:5c:5b:9f:b0:38:11:37:00:
d4:37:df:11:89:2c:7c:26:14:b6:fb:54:d5:f8:b3:
3b:13:7a:77:09:48:50:93:e5:d2:f8:81:0c:c7:19:
18:39:90:ea:55:8f:a3:89:96:b6:98:e0:66:8e:bb:
c9:d1:d9:8c:38:87:28:79:81:48:56:bb:a4:03:b8:
9d:bb:4e:2c:14:0e:49:6b:d9:94:14:0e:8f:04:35:
63:92:f7:52:1f:36:ab:5b:45:e2:55:bf:83:f5:b0:
af:6e:18:2c:91:fe:ac:cb:e6:0a:09:75:4a:3b:6b:
34:16:82:f1:0e:8a:d0:6f:17:ed:af:44:4d:82:fe:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:E5:84:3C:10:90:66:16:B1:7A:B0:1C:CB:39:FD:DA:D3:1E:11
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:7a:10:d7:00:b7:db:46:d4:1f:d2:b4:1a:cd:b0:74:59:
b8:58:0e:8e:a9:a9:e3:ff:84:80:b7:c3:83:fd:8b:0f:d1:c9:
70:b2:d0:b8:43:98:fa:2d:70:77:de:25:1a:4e:43:1f:a5:45:
06:b5:e8:53:39:f5:c3:2c:3d:ac:96:43:18:19:67:53:b5:bb:
64:71:23:60:c7:8e:60:22:bb:bb:8b:a8:8d:3b:ed:8e:f7:a5:
64:d7:99:f5:ef:d6:5d:74:bb:f1:a4:35:80:0c:a7:c2:2f:c1:
f3:ed:a5:f5:ce:36:90:24:a1:9a:30:3f:a4:ef:db:27:ba:87:
f4:a2:87:6a:dc:f8:04:ee:bd:4c:19:fe:f7:c9:27:1f:3c:67:
3b:a7:9d:c0:51:73:01:60:43:f2:f6:f3:a2:10:8d:7b:58:77:
98:9a:a5:3d:f6:b7:5b:9e:33:e7:66:9f:43:7c:7a:76:db:8c:
6e:e3:e6:af:88:7d:59:12:84:a5:6b:2b:7f:ad:78:f5:92:e7:
91:48:7f:5c:f3:99:53:3b:2f:d7:ac:86:bb:ee:d4:f5:3c:02:
67:dc:61:6e:f4:4c:db:31:9d:32:b7:7b:50:03:4f:a8:f0:d5:
e2:b2:6e:39:df:af:66:6f:c5:87:d7:67:b0:ef:91:fa:b6:7c:
13:d9:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:38 2025 by rpki-client