Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: OSEEIHZrPU8NslfugQt8EwvnS0xwZQSTGH7n+MikpWE=
Subject key identifier: A3:3F:79:20:67:68:C2:53:45:82:A5:2B:96:08:40:A5:C3:57:81:54
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 01984AE5DAD47A5DE98154F4C85DCB2E7C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 08:00:34 +0000
Manifest this update: Sun 27 Jul 2025 08:00:34 +0000
Manifest next update: Mon 28 Jul 2025 08:00:34 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: 3aX7VW1Fq49CgKjkfMMNNkFoyRBoJPCNGhJiqIJaUpk=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:da:d4:7a:5d:e9:81:54:f4:c8:5d:cb:2e:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jul 27 08:00:34 2025 GMT
Not After : Jul 28 08:00:34 2025 GMT
Subject: CN=a33f79206768c2534582a52b960840a5c3578154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:3f:43:ad:b2:c8:12:c6:32:cb:64:9f:ec:
12:a1:9b:fd:94:23:d8:47:d9:79:43:15:cf:8e:13:
20:67:55:b4:96:01:ca:00:d3:99:85:a9:be:be:91:
1c:3a:8e:62:e9:0b:1f:2d:cf:75:f5:7d:76:4b:69:
3b:82:63:fc:5a:57:9b:1d:08:dc:83:8a:52:8b:10:
33:71:e6:49:8c:0f:e1:cc:4a:1e:bc:35:e8:2b:bc:
72:84:de:06:f1:76:60:50:af:c1:12:2f:41:57:33:
ea:ce:09:f3:d1:d9:14:3b:8e:aa:cd:ad:f2:51:ba:
03:3e:e8:25:e3:18:e5:87:5c:2c:e9:27:75:c6:91:
28:69:06:03:6e:c3:a6:29:b2:a4:a5:7d:d1:8e:fd:
79:36:c0:51:53:a1:32:f9:09:ae:e1:91:d6:af:9c:
71:b4:cf:7d:8a:31:8c:40:3a:d4:26:9b:d5:df:34:
33:2d:3f:ff:e7:21:8d:c0:8f:65:9e:65:ef:08:50:
35:46:6c:fd:02:94:ea:3a:16:7f:7c:9c:03:16:1d:
9c:42:80:8a:49:22:bb:63:69:94:4d:69:ab:26:f7:
4a:fd:53:04:28:5b:37:cf:98:5b:db:60:53:0d:36:
e2:e4:3b:bc:0e:f3:b4:96:f3:ce:c1:01:31:91:75:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:79:20:67:68:C2:53:45:82:A5:2B:96:08:40:A5:C3:57:81:54
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dc:40:09:33:57:20:8e:bd:e0:1d:34:7a:bc:96:bb:b2:55:
47:7b:60:7c:e7:ec:f4:37:4d:1f:55:c4:84:dc:cf:1c:2d:19:
a1:7e:92:0c:f8:88:46:e9:8e:00:a3:54:21:bc:44:76:e4:b2:
28:8d:e8:72:42:87:fc:0e:01:1b:15:8d:64:75:97:74:2d:99:
76:81:e0:b7:4d:50:7c:79:a7:34:69:59:61:21:16:b5:07:9a:
75:1c:3d:ae:9f:32:52:fd:25:7e:ab:74:52:92:36:a7:99:33:
45:c4:8f:c6:35:64:a4:a4:3d:3e:a0:db:bd:8a:4f:ec:91:35:
d6:f3:d5:da:f4:eb:94:e4:c5:31:c1:d2:a7:45:c9:5b:41:98:
42:bb:bb:a0:34:14:87:1e:e5:ca:98:75:42:70:0e:33:aa:0a:
6f:c5:80:b9:5f:68:4e:68:22:73:00:54:99:4b:76:00:e1:ab:
e1:d9:67:d3:5c:41:c4:e0:90:ae:a0:84:56:7b:c5:17:3f:ef:
8d:f1:82:c8:42:11:e7:42:09:1e:44:49:44:6a:79:9d:c2:8d:
0f:4a:3e:e0:d6:1d:3a:6c:2b:f0:74:2e:96:45:ef:5c:4c:bb:
57:f6:f8:29:51:8e:ba:73:ef:d5:3b:29:cf:ce:e8:71:c3:88:
4a:59:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:33:29 2025 by rpki-client