Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: MLfJBPA6FIGHOF4/TZN7hzM6984yTbL0Kr8vaH1hpRM=
Subject key identifier: 27:31:C1:5B:D6:BF:9D:89:6D:08:98:D9:B7:AE:83:07:DB:0E:6B:2C
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 0198D5BBCE50DB08612A24853EDB0FC0F866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: ZbJqBwZI0Ms+ENxlgZQnIGsvSiMIMFwHbEWI92gJIVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ce:50:db:08:61:2a:24:85:3e:db:0f:c0:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=2731c15bd6bf9d896d0898d9b7ae8307db0e6b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:2e:ca:37:0d:9f:f4:04:99:43:75:9b:e8:
c7:d3:ea:7b:d7:17:b3:b3:b9:81:b6:cd:8f:bc:a0:
c8:da:81:05:c2:d2:8a:b0:7a:26:f0:d1:8f:55:7b:
5e:27:33:2f:18:42:17:af:85:e0:db:76:4a:c9:ca:
08:46:28:1f:5f:c4:97:8e:1b:de:52:69:6e:dc:a1:
dc:e6:1a:2c:f6:f0:a2:f3:0b:0d:53:f6:ff:e0:fd:
e8:1f:ff:b1:37:59:ff:2c:04:18:30:d6:5c:98:88:
10:38:d7:db:34:8a:67:30:9a:65:6c:7f:16:16:13:
57:48:b4:91:15:5e:e7:1a:08:64:cc:7f:57:a4:09:
23:c5:f8:72:7e:48:40:94:1f:88:e4:16:e1:38:cb:
c6:29:de:13:46:8a:b3:5b:91:c7:a1:60:56:93:30:
66:f0:d9:54:a6:d1:b6:d3:ac:c1:6a:be:0c:7b:ce:
1b:1f:c2:48:67:9f:86:07:6b:a8:b1:95:63:94:6f:
df:c1:3a:e9:02:ac:5f:66:66:40:25:a9:c7:91:74:
25:61:54:ea:14:e5:52:d9:26:9b:f7:f3:7a:65:c1:
48:a3:dd:1b:87:b4:45:e7:db:bf:14:ab:86:83:0a:
f2:5b:ba:71:18:6f:b7:4e:c5:bd:ed:29:7e:d1:39:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:C1:5B:D6:BF:9D:89:6D:08:98:D9:B7:AE:83:07:DB:0E:6B:2C
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:85:db:1c:1a:8d:31:70:81:9f:cd:06:dd:1b:c9:04:84:
02:6c:41:6e:f5:50:27:39:ef:1e:71:59:57:75:e6:09:e2:95:
1e:be:14:8c:ec:19:63:52:c4:e3:db:32:81:1a:14:00:e2:c1:
5e:32:e1:9f:81:f0:3d:e7:94:0c:01:10:b3:94:e1:3c:c6:a7:
0e:dd:f9:c5:8c:2d:7b:bb:6a:06:97:1b:c0:5b:6c:6a:e0:84:
0b:c8:ed:c3:bd:fe:c0:f7:d3:5c:e3:de:a4:1a:db:c5:b5:2f:
b0:2e:76:cb:fd:f6:93:e4:f5:b0:3d:0e:6d:6f:07:45:27:0d:
ef:fa:ad:63:e6:80:9a:3a:6b:66:55:b7:ba:05:d7:a8:ff:82:
a5:b8:b0:71:55:eb:61:7b:81:6f:d0:09:30:7b:bc:32:44:60:
6c:9d:ec:a9:85:24:3b:83:90:fb:2f:ce:d3:d8:c2:59:04:19:
6e:56:61:3c:67:c3:f2:5e:53:14:87:e8:0b:b6:d6:5d:20:74:
17:6a:d6:a3:0a:e8:e9:17:65:ca:11:b7:63:6c:3d:1b:fe:4d:
35:fd:dc:b5:f8:4a:7f:d2:80:12:ba:a6:87:1d:a8:e0:83:d5:
4a:c9:e9:e2:1b:c7:c7:a8:e2:f6:51:79:be:c1:88:30:7b:ce:
66:5f:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:18 2025 by rpki-client