Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: AJ4/DCFZ+QAqYuzRa7EilLCRqAsW97JQk7YT5P3A+HM=
Subject key identifier: 25:CE:9F:2D:95:54:90:E8:62:D7:62:91:21:19:54:E0:03:0D:95:B3
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0198D660F619C42E10C353EFA14ED1F4C6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1691
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: HIe8ynzolK2iVhlFwP18bIgazmykNtK0c1+J4r9/Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f6:19:c4:2e:10:c3:53:ef:a1:4e:d1:f4:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=25ce9f2d955490e862d76291211954e0030d95b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:e1:05:86:24:bb:67:dc:49:92:48:31:e1:
e8:49:2d:0e:d2:1b:98:cc:f8:d9:bf:b2:63:30:0c:
fc:57:4d:c9:37:fd:69:b1:0a:81:7a:a7:bc:10:1a:
aa:7f:00:3f:6c:9f:00:0c:7c:2d:58:4d:10:15:33:
b9:73:81:1b:33:1b:ea:b7:68:3d:12:e8:73:57:04:
d0:c3:c0:af:56:81:e5:e3:b2:2c:ea:a7:7c:8c:8d:
01:22:35:cf:eb:a5:21:f4:11:be:eb:48:7a:e4:4e:
5f:50:c4:d8:90:f0:b1:1e:71:f8:99:81:5c:b5:7c:
2b:3e:70:a1:88:c2:2a:1a:ff:86:66:b8:8c:8d:5c:
26:6a:bb:5c:5a:7d:fb:c4:4c:b6:12:71:ac:bc:c9:
6c:97:de:62:5a:21:40:77:7f:c9:6a:be:92:75:78:
b5:9e:72:14:e1:c8:03:eb:30:cd:39:12:f9:bc:21:
1d:d4:65:49:08:5d:30:be:ee:ce:40:aa:12:68:1b:
ba:87:25:df:44:1d:e7:72:52:27:09:9f:a1:53:c5:
1a:c0:b5:f2:6c:ca:29:36:bf:7c:a2:1c:cd:dc:6b:
f0:2c:36:10:dc:47:ae:e5:d3:c0:1b:64:07:0b:60:
21:7c:ac:be:db:09:0c:49:57:22:0c:15:06:cf:e4:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:9F:2D:95:54:90:E8:62:D7:62:91:21:19:54:E0:03:0D:95:B3
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:5d:9f:c0:9c:9e:e3:fa:29:51:07:ec:95:28:33:20:4c:
84:0d:dc:15:02:d8:73:ef:a6:0c:18:95:bf:ff:d4:4d:69:91:
ba:c5:51:75:77:4f:61:c1:ca:7c:c0:2d:af:e1:5e:0c:46:d6:
93:d4:cb:95:32:50:73:15:33:c6:75:30:14:29:65:c8:e0:ed:
75:3f:ce:af:d9:a6:5d:e2:32:6a:ea:b2:53:4b:ae:de:07:32:
7e:c4:11:cb:c7:88:e2:81:88:60:63:83:39:2e:bc:49:a7:0f:
9f:4d:2b:f0:e7:b9:bd:96:a2:78:1a:bd:98:22:01:ea:c5:33:
b5:10:55:96:37:83:91:5a:89:e3:b1:56:47:9a:60:d3:5e:a5:
12:90:22:af:85:6a:b6:bf:d0:2e:8f:17:eb:75:fc:8d:15:4d:
fa:f0:c3:c0:ef:b0:17:ea:19:8e:c4:c1:40:61:3a:e6:6a:fb:
b1:7a:aa:33:c4:0f:db:7b:85:43:f9:ba:d7:22:ad:72:ce:8e:
bc:2a:fb:f6:c8:5b:73:e0:52:d2:5b:4a:88:cd:76:c7:85:ca:
b1:c2:7f:7a:5e:13:35:b4:b3:80:b6:12:ab:74:01:a4:10:6e:
95:59:ce:1e:57:80:6f:b3:da:22:4f:7d:e8:f3:5c:ae:11:b6:
db:03:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:34 2025 by rpki-client