Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: U7Si28N3rMRz/9Saioo7ACSRhRNNkC3j+RCz1lNao9M=
Subject key identifier: 06:3C:94:35:2C:26:C6:A3:C3:11:DF:5F:0C:C3:33:F3:F1:80:CE:E0
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01984DAFE2F6B24F203445C3A13806ECB245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 21:00:29 +0000
Manifest this update: Sun 27 Jul 2025 21:00:29 +0000
Manifest next update: Mon 28 Jul 2025 21:00:29 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: RBujsmFaFBEJQts0flyDtv2idev278qqBr3YFzyiO6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:e2:f6:b2:4f:20:34:45:c3:a1:38:06:ec:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jul 27 21:00:29 2025 GMT
Not After : Jul 28 21:00:29 2025 GMT
Subject: CN=063c94352c26c6a3c311df5f0cc333f3f180cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:63:79:03:57:ce:1c:ee:58:9c:7b:a7:99:
2e:47:35:a6:cf:ad:d6:c3:76:61:05:90:ef:9c:bb:
a8:6d:42:43:5b:eb:e7:47:2c:d2:5c:a8:ea:04:75:
ad:19:0e:d0:79:d8:2a:b2:23:d5:36:2e:04:5c:9c:
dc:8e:0f:6c:71:2b:3d:86:67:87:e0:4f:00:2b:58:
b5:ce:1f:ff:a8:3c:0e:d9:c4:c0:be:84:0e:ba:a7:
0d:9c:67:f6:78:75:a5:45:e1:06:25:d3:24:41:cf:
55:8c:20:90:eb:80:6f:d6:5e:7d:27:57:34:71:3b:
d9:33:3a:ca:77:f9:ab:d8:76:f0:80:e3:6e:ed:bb:
e7:72:f5:ef:9c:51:85:05:c2:87:1a:f4:8d:43:0e:
57:1b:34:30:b9:13:80:97:d2:26:f5:c5:22:89:9c:
0e:74:da:34:0b:0f:f0:bb:93:61:91:7e:84:74:17:
63:25:69:0f:3c:96:49:9c:2c:2b:2f:c7:bb:57:b0:
16:be:cd:fa:a1:85:7d:56:de:94:ec:a6:26:46:1e:
b8:bb:f7:3c:c0:de:cb:21:e6:8b:f6:41:59:4f:e9:
55:e1:8d:33:f3:12:b0:53:fd:c1:3a:ad:63:7b:b9:
be:66:0e:1b:c9:bd:44:c0:d5:31:b6:ba:dc:59:17:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:94:35:2C:26:C6:A3:C3:11:DF:5F:0C:C3:33:F3:F1:80:CE:E0
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:30:95:62:53:2f:58:72:ed:1c:67:a3:61:87:33:10:b9:3e:
02:ea:3a:3b:17:4c:3f:4a:60:fc:29:3a:6c:f0:6a:c7:35:26:
71:2a:35:63:55:b8:0c:d1:de:78:1f:b0:f5:87:c1:c6:98:70:
c8:c1:29:32:d0:87:c9:89:30:87:95:12:ac:38:66:92:df:11:
96:ca:5a:19:8b:e1:69:3f:c9:e7:37:48:ac:0a:17:ff:76:e5:
f1:c3:3d:55:42:09:7f:52:68:b5:d3:a1:0e:46:9e:33:73:eb:
e5:2a:a0:35:86:4b:1a:f0:05:4e:5c:52:22:51:7f:e9:98:b0:
c4:50:b1:8f:4c:7a:d7:bd:f2:fa:db:ec:cf:6e:ee:2d:ba:06:
67:e2:c8:3c:d8:7b:41:61:bc:89:09:6c:91:1f:ff:ea:72:fb:
df:c0:92:a7:5b:01:3c:26:a1:27:25:b7:ad:40:5d:f8:2f:77:
ce:02:e3:13:0a:91:68:0a:a0:23:9d:04:6b:42:31:68:3d:a3:
1b:13:6c:49:b2:d9:5b:56:fe:3b:73:ce:39:87:64:78:ca:d4:
d8:81:0a:34:ae:6e:3c:bb:ed:5c:ed:c2:89:89:06:c5:68:61:
2a:d0:b3:59:70:b3:27:26:dd:d0:ba:d9:86:12:80:3d:eb:4e:
08:2a:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:10:06 2025 by rpki-client