Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: nFt7Nhz6Mp7gLvgsPMz+AVGbq7orm1077zIjzJScnrs=
Subject key identifier: 5D:26:A4:92:68:3E:0B:B4:C1:C7:C6:74:ED:52:86:CF:BA:F6:80:A4
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 0198D5BBE04E6D7264BF6EE1DA679D099973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0B52
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: hdG2g26h7Dv/HViPkXvGesoWjR9hp8zzFkiK32kuo3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e0:4e:6d:72:64:bf:6e:e1:da:67:9d:09:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=5d26a492683e0bb4c1c7c674ed5286cfbaf680a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:ab:6d:6d:a0:e3:88:bf:d9:40:9b:15:c5:
f3:8f:15:a2:70:20:55:53:b0:ca:a4:67:94:be:c7:
f9:9e:bc:ef:a0:e4:62:9a:fb:dc:3c:97:b0:b6:0d:
be:7c:0a:52:2b:a0:55:36:08:91:c5:bf:57:a2:f5:
bd:49:27:9d:4a:50:a8:6a:8c:b8:62:c4:af:f3:a9:
65:9b:50:d4:ed:ac:fd:66:64:67:fa:0a:ec:14:c8:
1d:7c:03:7e:ea:39:24:33:ad:32:1a:6f:2a:ea:95:
1d:f6:9f:87:6d:19:85:03:11:f0:33:f2:34:bb:27:
7b:2e:8b:3f:d6:2e:b1:81:6b:20:c2:1a:0e:dd:49:
a3:02:af:b0:6c:0a:e2:19:25:4f:b4:fd:27:f7:d1:
ba:57:9e:46:02:5c:6b:62:c3:e7:69:5d:1e:75:c0:
69:f3:db:57:9f:5a:2f:ba:dc:8d:66:6c:55:e3:c5:
97:3f:af:98:de:b3:05:e4:a6:3a:1a:85:b6:28:96:
20:0f:58:22:58:de:7b:f2:81:8a:b4:e5:e5:29:e9:
fe:da:84:65:6e:48:fe:31:5f:4b:fd:bf:2b:9b:cf:
ff:6d:34:c0:42:52:25:e0:52:e4:51:db:5c:e0:cc:
94:02:92:9f:46:cf:02:1c:06:4a:3b:2d:ae:fb:3e:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:A4:92:68:3E:0B:B4:C1:C7:C6:74:ED:52:86:CF:BA:F6:80:A4
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:14:ed:69:53:cf:c8:02:7b:f8:e8:d0:55:f2:07:1a:30:df:
f6:1e:70:c8:e2:79:e6:83:f6:92:ca:c9:52:20:ee:bf:f6:b8:
5a:57:7e:80:85:87:ad:82:9c:f0:d4:55:bf:d7:a3:49:3f:95:
b0:ab:11:2d:8b:47:63:88:72:b2:b1:42:7e:f6:c3:54:2a:a1:
46:e2:f2:c5:1f:c9:b3:13:85:7b:dd:b4:e7:05:ba:51:63:8e:
72:e3:56:f4:1c:e7:3d:95:d8:55:dc:eb:3d:ce:53:07:30:42:
09:a5:8f:4e:0e:2e:2f:5b:ca:c4:38:86:0f:bd:37:b1:7b:45:
ce:37:52:9b:f4:bf:1e:2f:c3:0a:e7:d6:38:46:cb:b0:e3:8a:
fd:1e:ce:41:6d:a2:cb:55:b6:4b:27:b9:59:a8:f2:84:fb:42:
a1:4f:0d:32:43:d6:7b:40:1a:3d:d2:5c:c2:e0:59:3e:72:de:
a7:ef:e7:09:11:2a:9a:f7:5c:5b:4c:63:da:f9:c7:66:e3:0e:
20:9b:a2:f3:da:c4:27:9c:66:04:b9:36:94:06:fd:5b:de:80:
9b:a9:c4:29:c5:94:83:3c:a5:f7:5d:02:25:18:a3:82:87:57:
eb:b3:76:eb:07:75:49:ce:83:09:44:0c:0e:23:af:9d:3b:11:
30:11:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:35 2025 by rpki-client