Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: Bp6Nn0ykt3dkmY7tMsF2zEE55OhnNN1rVVxQLfPrsjE=
Subject key identifier: 8C:BB:1B:55:2B:95:36:28:57:19:5D:25:DA:8C:CD:81:4F:AD:B6:1F
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 0198D5837BC9A4233FA5374DD2D8482C4C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 095C
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: YCKzigq8NldPUZuCA+R4Yu7rvyVXqZBZ6r8J3jw7ako=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7b:c9:a4:23:3f:a5:37:4d:d2:d8:48:2c:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=8cbb1b552b95362857195d25da8ccd814fadb61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:66:b7:0c:1e:ed:fa:86:95:14:e9:c4:b2:
93:c6:a9:0d:7f:03:07:62:f2:19:f8:fc:73:96:db:
df:4f:f8:93:a3:10:85:f3:15:25:92:94:a3:d8:42:
8f:b8:6f:ee:97:be:3d:fc:1d:32:d5:c3:5c:30:53:
be:bb:ee:15:77:a9:a1:46:03:53:23:6a:2d:f8:90:
9f:f3:90:02:9d:7b:93:fb:d0:09:96:65:89:4f:b7:
f8:44:53:6c:30:16:f9:8b:1c:ab:39:2a:7c:47:7c:
eb:8f:c1:1e:37:db:d0:a2:98:c9:fb:77:e9:4b:5c:
5d:da:d9:58:1a:5c:0e:dd:9d:c8:0f:a2:26:71:44:
79:49:0d:cf:97:54:df:99:bd:c3:37:15:0c:9d:8f:
94:1e:fd:cf:91:0f:c0:33:89:89:ea:45:76:a6:aa:
ff:4f:54:b9:fe:86:d7:98:a2:6f:51:d9:ae:4e:d7:
99:ec:bc:c9:e8:53:66:06:1a:65:7d:b5:aa:0a:89:
f1:f6:0e:9e:33:5b:6a:79:ff:27:4f:70:b3:cb:e0:
be:d5:ab:57:3b:77:0d:ca:d8:52:70:c1:04:ec:03:
42:8c:13:c6:4a:c8:51:bc:ca:aa:02:88:9b:bc:0f:
19:8f:dc:57:46:31:ce:d0:cd:7b:18:33:bd:7e:75:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:1B:55:2B:95:36:28:57:19:5D:25:DA:8C:CD:81:4F:AD:B6:1F
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:0e:ff:80:64:df:55:11:a1:9d:7c:75:23:8d:11:89:62:
e0:9c:19:b6:6c:f8:5f:ab:eb:f3:ea:80:94:70:8b:25:82:0e:
75:83:bc:81:5f:75:5d:de:20:0d:64:bf:a8:ef:64:6b:0d:97:
0b:d0:a0:ff:84:4a:92:07:66:d9:04:8c:78:47:d0:d9:61:65:
7b:d9:4f:98:21:27:bf:0e:ba:d4:a3:bd:c5:64:23:6e:39:c0:
0b:e8:0c:25:69:4e:7c:55:99:8b:94:cb:51:e5:63:17:f5:81:
a0:bd:ca:c9:d1:90:93:76:2e:1a:f8:14:be:25:7a:08:f0:c6:
2d:9a:9b:0f:c5:de:d1:08:02:4b:2d:17:34:86:b0:e1:71:d9:
ec:79:69:82:b4:25:56:d2:6b:e2:bb:55:8e:6f:b3:41:8f:84:
10:fd:d8:ef:89:5f:1f:e6:a3:91:80:f0:b4:1a:29:96:78:b1:
1c:fa:54:75:42:33:8e:30:51:d9:55:39:41:b5:6d:78:4d:81:
23:45:a5:7c:58:14:76:16:43:21:4c:da:43:4f:67:2c:e5:0f:
7b:b5:4a:16:b0:cd:2a:e1:91:b8:9a:51:eb:8a:66:48:27:d7:
fa:38:67:6b:94:ff:0f:52:ec:72:25:94:bf:37:e9:3b:37:b3:
90:c2:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:36 2025 by rpki-client