Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: uTFUfX+7qZAtwhkpXvoI3r1FIhSk4Yyq7LZHgA01gTQ=
Subject key identifier: 52:A9:5A:E5:9D:1C:9E:A2:04:27:8F:16:72:7E:3B:E5:32:77:C3:CB
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0198D5F17F4EE8B82F5CC86BD991CCE498ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 08D7
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: qh7MeaWihmiLBqmPtXKQnj8VvpWv+Do0sjU23K75Tp8=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7f:4e:e8:b8:2f:5c:c8:6b:d9:91:cc:e4:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=52a95ae59d1c9ea204278f16727e3be53277c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:ce:f9:6f:d6:60:bc:06:84:41:26:6a:53:
93:45:0a:6b:f0:d1:03:3b:2e:c9:ed:45:99:61:5d:
34:c9:a1:6c:48:13:dd:25:1c:0a:a8:a1:b8:09:7b:
b7:43:66:e8:e3:dc:98:4a:0c:49:56:1b:a2:26:de:
18:2f:79:01:bd:6e:07:5e:13:b0:7d:a9:a6:fd:00:
06:2f:95:4b:8a:5c:fd:9f:c8:c3:61:96:8a:f1:5e:
70:ab:38:93:86:3f:c9:3f:87:9a:3e:97:78:25:96:
f8:70:89:69:24:16:44:d1:0a:2a:3f:e9:d4:47:61:
ef:b9:a8:20:f0:45:6c:f3:65:db:d0:43:0e:96:ec:
cd:80:41:e6:cb:91:a5:6d:a4:00:b7:80:00:a8:14:
b6:e1:c0:df:3c:0c:07:c8:fd:06:5c:2e:c7:78:13:
28:a2:59:dd:03:b2:6c:6e:4f:0a:bd:f6:2c:93:e1:
bf:15:8e:e5:0e:6a:d4:b8:a1:a6:b7:11:af:7a:c1:
c7:fe:88:41:59:b1:64:93:96:44:0e:a3:6d:ab:52:
9a:7b:0a:f3:2b:f6:15:e5:6f:35:7f:94:c2:d9:20:
d5:70:20:89:4b:e8:f7:90:ea:21:66:36:37:97:86:
04:a4:63:97:56:70:3c:3e:9d:12:16:85:9f:96:e9:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:5A:E5:9D:1C:9E:A2:04:27:8F:16:72:7E:3B:E5:32:77:C3:CB
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:84:c1:5d:5e:8b:52:a1:f9:7e:2a:cf:bb:d6:08:ee:10:
cc:53:a6:95:25:90:0b:43:89:15:24:81:d7:96:0d:25:9d:9c:
ff:5d:ba:9c:28:2b:e8:0a:15:cb:91:b4:df:bc:27:9d:95:41:
69:29:1f:82:e7:bb:00:d4:d3:e8:29:97:5d:be:5a:82:dd:42:
13:9f:22:fb:d2:64:cb:c4:3d:97:d5:b6:8e:27:75:47:52:14:
82:7f:52:07:94:0c:37:d8:dc:1e:ef:44:1a:ea:85:ce:bd:85:
b6:e5:c1:92:a0:a5:42:36:fc:cf:12:e5:ff:2a:56:f0:35:f7:
65:49:49:c4:22:c0:64:20:45:2b:c6:1a:4f:f8:4a:8f:7a:4d:
5d:3f:c5:50:55:6e:1d:e8:2c:31:32:f5:00:bc:34:db:cb:b6:
93:f1:65:ad:6f:52:a2:ac:a5:c8:be:de:f3:ec:40:20:c8:8c:
25:5a:a4:a1:b8:1e:3f:ff:d1:3b:b4:94:57:94:dd:1c:a7:ec:
57:79:8c:b3:ff:71:47:5c:4b:98:94:20:68:c0:b1:37:f9:f8:
bc:7b:53:6c:ea:bb:94:b2:db:a3:57:15:76:8d:aa:6f:3d:8e:
7f:ef:47:c0:15:c3:a6:88:c6:68:7b:79:e8:87:43:16:f5:db:
dd:7f:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:11 2025 by rpki-client