Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: jyzE3N1ij/03PLdbtyPIlV4klqWJddOWV83x33JziSo=
Subject key identifier: CA:3E:55:33:46:FB:0F:92:51:6D:4D:31:5E:9A:5A:2E:A7:28:4C:A7
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0198D4A7C415A463C64521571F6783CA450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0B98
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: lC2gGCfQjhRlILxD+pU/a2U4DdSdaZ5hNopqk1ws1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c4:15:a4:63:c6:45:21:57:1f:67:83:ca:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=ca3e553346fb0f92516d4d315e9a5a2ea7284ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:cf:38:a5:e1:23:d4:a8:16:c3:99:1d:63:
ff:d4:93:d3:42:d9:dd:e3:ab:19:0a:92:d5:90:1f:
79:ed:76:b1:df:e6:54:77:6c:03:60:b3:b6:35:f0:
43:18:48:17:f3:a5:7a:e3:59:84:21:d2:d4:56:50:
dc:14:f1:9b:5f:61:b9:01:de:ee:3e:fe:e5:c4:b6:
71:90:9c:32:91:ea:9f:27:89:0d:8e:0f:40:f8:ae:
bb:8c:f0:0e:ef:39:ab:ca:2f:12:29:00:c7:1e:f1:
36:4b:b4:91:2e:48:7d:dc:c0:57:d0:bb:12:29:75:
e0:48:65:e9:f1:72:d3:aa:00:c2:d8:a2:a9:12:a6:
ee:c1:49:a6:b9:ef:a5:6d:ed:62:d3:7b:66:df:c6:
63:f6:ad:87:61:74:f8:2e:3c:da:73:f6:f1:51:f5:
a7:cf:b0:0f:d9:d8:ad:3a:de:35:c7:c9:ed:64:06:
6f:b9:c7:be:39:1a:d3:41:03:5b:13:f4:7f:ac:7f:
e2:0c:e8:bb:95:2c:bf:5a:a2:47:9c:cf:ed:84:36:
f7:0e:1d:8f:c1:fb:16:77:e0:7d:35:51:88:cd:8e:
93:cf:e7:7b:31:53:96:a2:aa:da:ff:1b:d7:6d:18:
90:62:22:dc:91:1a:a3:6b:19:6a:fb:8c:a0:1e:34:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:55:33:46:FB:0F:92:51:6D:4D:31:5E:9A:5A:2E:A7:28:4C:A7
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4f:47:55:d1:db:cc:2a:5a:08:cf:65:49:0c:3b:77:31:0c:
36:8a:88:06:19:85:b8:0f:ac:0d:9f:cf:84:7b:a9:9f:ae:b4:
48:6b:b2:da:45:45:da:ca:89:46:49:79:4f:24:c4:0c:7f:2f:
9c:a3:5f:fc:ad:27:9c:c1:6e:93:4c:04:cf:8a:2e:7f:df:4f:
0a:20:0f:ba:72:e4:3e:ac:95:3e:b5:5d:1a:c3:40:f4:a8:26:
8d:4e:57:10:16:4a:6b:39:90:64:3c:8b:b6:1a:7f:72:1e:5c:
9e:ea:28:1c:70:62:40:b6:a7:cd:50:eb:2c:a7:e0:c7:3e:2e:
9e:7b:e1:09:ee:3e:65:dc:ff:4e:b0:54:c1:e0:93:6a:19:70:
5e:7a:25:23:59:62:84:b7:ec:2c:c8:ee:92:00:09:d2:69:24:
a8:ce:88:d7:a0:81:71:38:0e:61:53:a0:e7:b8:1f:8d:90:a0:
72:57:5e:68:e6:31:03:ff:43:f0:fc:d5:7e:c1:d9:7d:ac:5c:
ea:2a:dd:8c:3c:7c:9d:27:8f:9a:60:ec:93:03:05:ea:df:cb:
06:41:af:26:e6:09:44:a0:83:44:4b:9b:09:78:89:78:54:c1:
04:07:32:5c:a7:2a:59:83:f6:ac:5b:cb:4c:19:f6:47:90:ad:
89:73:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:13 2025 by rpki-client