Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: ddoLzOKPLxsgNcEcSStH/EjfNnrIArg/roFO+9hDLpQ=
Subject key identifier: 95:5C:6A:8A:AD:83:32:32:8F:87:01:29:B8:09:D2:21:76:76:9E:87
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 0198D6CD4D4B0735FF2B183E91E87B6942BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0952
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: WSlR2osq3/E2tXht3YTktvgxhGVexSX/0QqLOmPIkZ8=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4d:4b:07:35:ff:2b:18:3e:91:e8:7b:69:42:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=955c6a8aad8332328f870129b809d22176769e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:3a:04:5c:c0:08:3d:a6:fa:0e:fb:7d:c7:
79:cf:13:7f:e6:b1:22:58:7c:41:b2:78:25:bc:37:
7e:f0:da:e3:83:cc:1a:6b:ce:b7:2c:7c:92:46:01:
91:c9:d0:19:0b:d4:10:0b:b9:f3:20:b2:47:46:32:
4d:6d:3d:76:81:90:ce:55:3b:11:d8:91:18:ba:1e:
53:5f:2d:e8:7f:37:ff:34:b5:a7:c3:40:9e:1d:9d:
89:0f:86:f7:7b:bf:df:51:e8:64:49:18:ba:50:57:
d6:4f:af:40:75:ca:8e:be:8c:2c:5f:7f:69:9c:fb:
77:6f:1b:f4:3a:55:7d:bf:b1:9e:a2:dd:1f:d9:7d:
0b:1c:48:93:58:86:c2:a9:3b:7a:45:b0:ab:7e:b9:
11:34:a4:d9:86:82:b6:dd:39:d2:f5:4f:2e:b2:d5:
97:75:81:a9:cf:41:d9:fd:a2:68:73:25:e2:cc:62:
55:7f:52:b0:f9:bf:cf:5f:72:36:91:5e:d1:05:9a:
04:86:7f:cb:99:e9:e5:06:5e:dc:e3:fc:fc:c5:38:
96:26:10:ae:b9:4b:4d:08:00:10:bc:f5:22:5a:d0:
01:a4:7c:0f:72:e9:cb:79:27:c3:2f:02:19:fb:0d:
0a:7a:c0:3b:38:99:94:f0:be:bd:59:38:aa:11:3d:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:6A:8A:AD:83:32:32:8F:87:01:29:B8:09:D2:21:76:76:9E:87
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f9:cf:4f:e4:f9:d4:cf:7a:ca:c6:ee:3f:3e:d1:11:61:97:
53:2a:4a:f8:ab:f6:00:69:c7:8e:4e:4c:81:75:65:78:e7:dc:
44:69:b5:d0:5c:43:d8:bc:4d:c0:f7:3a:d6:42:2d:d5:a0:67:
45:45:c1:a5:3a:2b:09:1e:c1:e7:04:b2:e3:92:de:a1:92:26:
1c:df:21:09:16:5b:6b:34:cc:7f:c6:12:d6:38:82:b5:fc:74:
dc:e8:63:a7:fe:6a:7f:ca:2f:00:5f:1b:bf:c9:dd:db:96:4d:
d2:9c:18:12:a5:6e:16:4e:c1:f0:33:ff:37:7a:84:89:63:aa:
97:e6:2f:63:c5:0f:25:54:50:d6:df:a8:29:12:15:db:52:ff:
f3:a5:4c:26:50:1d:43:5d:ac:3f:14:e5:9b:50:f5:29:8b:6b:
d7:e1:28:df:6b:00:d4:db:95:e0:89:23:9d:80:12:24:97:1f:
73:c0:27:ce:ae:de:19:b8:32:b9:c8:cd:57:d3:f7:d9:d3:49:
ba:22:98:25:56:fd:8a:f4:74:82:4f:ff:1f:7c:e6:5c:fd:4b:
39:70:3e:e6:51:a1:8a:99:c5:90:43:ec:d3:a1:df:f2:bc:55:
e5:f5:61:16:9f:f8:af:e4:2c:ef:37:3f:0f:e2:11:5c:6d:34:
d5:e4:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:11 2025 by rpki-client