Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: ZRYN7KWwzHbmKm9nqmBsreYUJulKV75LXfVz4vcPd6k=
Subject key identifier: 40:DD:98:D1:C2:35:5F:3B:60:81:57:03:1E:19:7C:2F:D8:96:3F:13
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019844ACE484B96872F862A67EC545F02463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0ED7
Signing time: Sat 26 Jul 2025 03:00:37 +0000
Manifest this update: Sat 26 Jul 2025 03:00:37 +0000
Manifest next update: Sun 27 Jul 2025 03:00:37 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: b7WJRelKrrjeVhwAuGaWoE7KeWAEHE670oM9UPvjMJ0=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:e4:84:b9:68:72:f8:62:a6:7e:c5:45:f0:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Jul 26 03:00:37 2025 GMT
Not After : Jul 27 03:00:37 2025 GMT
Subject: CN=40dd98d1c2355f3b608157031e197c2fd8963f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:d9:3c:41:5a:28:17:ef:25:6e:75:7d:eb:
cc:1f:38:fa:e0:ce:b8:42:e1:73:51:3f:1a:f7:57:
45:9f:46:d4:67:6e:35:87:23:c5:c2:e4:51:12:df:
35:29:0d:0f:0a:94:e3:c9:01:e1:58:d2:87:09:74:
34:b0:1f:2c:78:80:99:71:4e:f5:a8:b5:10:f5:dc:
ed:3a:49:09:84:7c:dd:44:3a:b2:09:2d:b0:a7:d6:
2b:87:bf:62:94:ff:93:cd:90:d6:b0:b0:45:6c:24:
20:32:ed:b3:e7:91:22:d4:aa:99:47:fa:91:13:60:
d6:eb:d9:9a:73:4f:02:ee:9b:6c:e6:0c:92:a1:61:
84:09:57:d4:81:c6:bd:ed:e1:b5:38:6b:46:6f:08:
34:7c:ef:0d:a5:ff:c5:02:c7:a4:4b:cf:ed:e5:4e:
0a:b9:5e:a9:17:54:44:9a:39:46:8d:2e:75:78:b3:
d0:a7:fd:61:11:59:80:18:8c:74:3e:a8:c4:9c:49:
63:08:e0:4c:9e:7a:32:92:21:a7:b3:a8:74:96:fd:
05:47:5b:f4:48:b6:0c:e8:a8:61:9d:2a:ed:86:29:
a4:a8:12:b4:fb:9e:4d:cc:ad:e6:ef:39:0e:5b:45:
52:6c:f4:a4:24:24:82:1c:fb:cb:1b:44:77:8c:e8:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:98:D1:C2:35:5F:3B:60:81:57:03:1E:19:7C:2F:D8:96:3F:13
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b7:8f:a6:a0:8a:ca:b2:38:f3:de:e4:d0:bb:d9:d5:96:b8:
c2:eb:77:11:02:f5:c7:bc:e3:c7:74:31:66:c2:9a:1d:e0:57:
4c:c9:81:24:44:76:3a:88:3f:7c:d4:a3:fa:e4:b0:ba:3b:6d:
5e:1b:3e:b6:f5:0f:39:ae:a7:f9:ae:c9:32:43:81:4f:68:ed:
50:c3:0d:ef:5c:a8:58:68:64:6e:dc:5f:04:27:fd:09:3a:08:
e3:a5:57:37:25:fc:a5:41:1f:80:ad:49:f4:51:4d:82:76:e7:
a9:2b:61:94:66:c2:42:c2:16:1f:06:35:69:c4:77:5c:ff:cd:
1d:19:f7:f4:5e:bf:5e:6d:fd:e6:4a:2d:01:13:33:e5:d5:c2:
31:7a:82:ba:9c:d5:fb:df:7a:35:ad:e2:f5:fb:21:9c:3e:8a:
28:e3:63:a1:60:e5:67:22:e1:61:c7:eb:54:2b:be:e7:86:a5:
b0:6f:66:5c:6c:ad:a0:c5:f4:3f:92:3e:67:2d:9e:2e:88:9b:
47:1f:f7:55:03:01:2f:59:ee:f1:fe:c7:63:41:04:f3:36:34:
e5:0f:75:9d:d6:76:98:83:95:fa:f4:7e:8f:8c:b0:87:13:82:
c4:7f:40:7c:b1:60:35:55:19:37:3f:a7:40:ba:e8:19:1d:c1:
df:3d:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:22:42 2025 by rpki-client