Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: T0zzlpsWlNeejavnsNEsZDEptcHni+CRO30JR0gJTK8=
Subject key identifier: DE:D1:C3:BF:4A:94:1C:5E:75:30:FC:52:6D:19:EF:0B:DA:2F:F7:B7
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 0198D7A8B5CBDDBBFE035323744C7130027C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 16:00:14 +0000
Manifest this update: Sat 23 Aug 2025 16:00:14 +0000
Manifest next update: Sun 24 Aug 2025 16:00:14 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: RA+l/93ZxvKlc2knzgF4+PgKX60n0j49nMSCZ9kKYqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b5:cb:dd:bb:fe:03:53:23:74:4c:71:30:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Aug 23 16:00:14 2025 GMT
Not After : Aug 24 16:00:14 2025 GMT
Subject: CN=ded1c3bf4a941c5e7530fc526d19ef0bda2ff7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:34:0c:bc:83:88:fd:d8:fd:b7:aa:b0:c8:
27:73:95:9c:32:e4:07:4d:12:c9:87:f4:f5:5b:0c:
12:7e:f4:90:57:aa:e2:8c:54:41:4b:b4:4a:f5:a1:
fb:7d:f7:10:b5:25:b8:10:d0:af:68:f9:16:fd:59:
a6:1f:a8:a6:f1:1a:a9:9f:33:d1:41:bd:d8:23:d0:
c0:ea:9f:c9:46:d3:9f:ca:18:46:0e:53:91:47:f6:
39:34:f0:98:bd:75:bd:5c:85:09:ff:86:57:4f:3d:
c6:ec:78:74:1e:0f:a5:c4:d6:3d:cb:0a:c3:bb:d4:
9d:37:40:d7:20:cb:39:b6:b5:aa:c2:45:4f:fe:38:
78:73:4a:67:2d:bf:1d:12:34:c2:97:15:33:ca:bd:
2a:3b:14:2b:d3:53:73:ff:d4:bc:16:c8:80:9c:34:
46:b8:da:8c:29:3a:ad:5a:13:80:80:58:94:6d:24:
17:18:28:3d:57:05:58:18:0e:94:f1:7f:3e:d7:0f:
c9:56:9a:e3:3c:4e:4e:1a:3c:ee:21:09:c9:40:96:
69:66:b0:1e:99:54:e3:03:d8:24:cd:c7:e3:ad:06:
95:f2:ea:d4:81:58:b2:fb:23:83:88:5d:c3:05:e1:
4f:d7:c7:12:66:b0:29:23:f9:40:ed:c2:4b:66:f2:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:C3:BF:4A:94:1C:5E:75:30:FC:52:6D:19:EF:0B:DA:2F:F7:B7
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:50:7b:ca:7f:e4:bc:70:37:d7:b3:c5:7e:dc:5e:b2:cc:7e:
67:03:91:e4:07:54:a3:68:06:4f:5e:99:c2:fb:3f:80:62:2d:
19:cf:bb:2e:6a:0a:3f:bf:00:eb:f7:21:58:7d:99:f0:39:13:
95:ae:2a:c5:5e:7f:89:57:09:da:60:06:8a:fa:c9:5a:a0:35:
43:61:16:69:49:e6:fa:69:d4:6e:73:29:3a:31:c6:6f:2c:14:
08:f5:8d:a7:b2:cd:8e:eb:0a:55:74:81:60:ed:b3:0c:40:d4:
24:d6:b9:d9:22:df:cb:ee:73:cd:d4:f1:8d:4e:b0:72:42:71:
8d:02:c7:12:6f:3b:7d:4c:92:24:d9:d2:e2:42:2f:fc:5e:48:
82:6f:78:60:49:2e:d1:16:ed:46:e4:27:b8:2b:8c:f8:93:d5:
ef:64:86:7e:d4:ce:34:ae:2a:61:c3:82:d1:09:20:25:e2:d6:
9c:52:4a:3a:5a:32:a3:8e:b9:83:05:a3:60:92:5a:ba:9d:56:
ae:88:d2:f4:c3:91:dd:7b:37:fc:ff:70:67:aa:b2:4d:d7:d5:
85:c4:ff:22:26:33:79:41:10:57:52:99:5e:f5:e2:99:a3:24:
90:ce:c1:ac:e3:16:eb:fd:d9:94:f9:cd:59:8b:f4:21:8d:06:
8f:ec:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:59 2025 by rpki-client