Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: ojgtvCn1cVFpmBwgAGxnJtjb1rkAYyIUlO9yQeLap+Q=
Subject key identifier: AC:04:09:39:59:5E:BA:84:DB:59:ED:5F:8D:D2:7C:B8:E4:78:80:EE
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 0198D73B11916FDF7B6612D968A23B100F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 0FB6
Signing time: Sat 23 Aug 2025 14:00:29 +0000
Manifest this update: Sat 23 Aug 2025 14:00:29 +0000
Manifest next update: Sun 24 Aug 2025 14:00:29 +0000
Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: w7cNgUsKTR5an0ESXvEQlVwhaFN8ngyou+q1yAdJSp8=)
3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:11:91:6f:df:7b:66:12:d9:68:a2:3b:10:0f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Aug 23 14:00:29 2025 GMT
Not After : Aug 24 14:00:29 2025 GMT
Subject: CN=ac040939595eba84db59ed5f8dd27cb8e47880ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:c2:16:0b:6c:d5:8f:6c:8b:20:7c:ea:c1:
fc:90:c0:4a:bd:be:a2:32:a0:1f:b3:3c:ee:04:f4:
d1:5c:c8:42:66:2c:e7:d6:ca:90:0a:2a:53:d0:74:
aa:84:68:c0:7a:f6:26:5b:88:d0:8f:d4:8d:e4:9b:
d7:22:27:d6:71:db:4d:f7:09:e8:8d:19:53:06:12:
89:27:5a:56:66:b1:2b:28:67:89:49:de:5f:14:8e:
6e:74:db:c6:66:a4:0f:93:c1:e7:6a:a0:08:78:18:
fd:ab:ef:c0:83:e5:20:5c:ba:fb:3c:9b:88:22:d7:
d2:69:80:b5:b3:60:d3:5f:21:20:e8:ef:1a:8d:c7:
7f:cf:a5:d5:0f:c5:16:ed:38:77:48:6b:5b:dd:b7:
43:22:24:0e:1f:a7:b2:0b:ed:1c:9a:f6:b0:ad:7d:
4f:5b:5e:f1:11:8b:b9:fe:6d:1b:34:b8:c4:a4:23:
a5:e5:8e:5d:a1:68:e1:47:db:48:f7:f4:44:9c:a2:
7e:4f:a0:ee:f7:36:bf:a9:9e:86:89:72:7f:b5:a5:
12:09:f7:23:de:48:99:c2:0e:5b:46:8c:b2:1d:07:
0c:cc:04:05:de:1f:3c:97:79:b0:b8:67:63:7d:0e:
be:f8:24:62:ec:28:40:6f:7f:a5:0b:70:20:3c:45:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:09:39:59:5E:BA:84:DB:59:ED:5F:8D:D2:7C:B8:E4:78:80:EE
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:29:38:db:11:fa:b6:4f:2d:54:9e:7b:fb:39:b4:4b:51:
7f:12:c4:3b:d8:f1:10:6a:83:37:b9:45:c7:23:68:ae:75:68:
59:a4:c4:fd:41:64:96:b0:26:7f:cc:f9:e0:72:54:37:15:a3:
99:47:8d:a2:ea:78:89:25:a4:b2:e1:3c:41:2b:32:4d:e6:20:
df:25:6c:4f:8a:c4:1f:39:6c:50:ea:c6:8b:39:a2:fe:ee:22:
3d:83:a3:d6:e1:1e:f7:13:54:ef:bf:4d:cd:9c:c2:b4:00:55:
67:86:71:bf:81:c3:40:42:40:2b:38:b2:f0:6a:e1:17:af:57:
8a:70:1c:49:37:1a:15:cb:ea:ad:4b:6f:1b:3f:20:9c:66:66:
c7:e2:d3:9d:57:6d:cf:97:0a:12:08:ba:be:79:6d:99:4c:47:
cb:04:f8:35:0f:e9:9c:2d:53:16:ae:41:aa:d5:a4:dc:d6:46:
5a:ad:2b:1a:59:b1:7c:41:48:e9:37:c6:75:5f:16:c9:3c:21:
7c:aa:c1:cd:ef:c6:5c:6e:aa:ff:75:f9:58:23:45:7b:43:19:
d1:16:f0:66:4a:10:1e:6f:36:f5:22:35:fc:71:7c:f2:f8:61:
63:c8:39:ec:2a:f9:3b:b4:a4:28:e0:0b:94:52:0e:51:38:58:
d5:6d:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:43:36 2025 by rpki-client