Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: xWflJOxelQvvEIjV4ieHE4KBKic6uUsEMNZH8X/gCxI=
Subject key identifier: 3A:4C:7B:EB:61:39:DC:60:48:72:A3:76:6A:56:75:7D:03:59:99:58
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 01984A4183DEEB1B1DFEDE1731426D003E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:01:04 +0000
Manifest this update: Sun 27 Jul 2025 05:01:04 +0000
Manifest next update: Mon 28 Jul 2025 05:01:04 +0000
Files and hashes: 1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: kK+qtMtk+xC8XcuQOEV3t4TF0+yfz2dYEsVlN6mWZOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:83:de:eb:1b:1d:fe:de:17:31:42:6d:00:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Jul 27 05:01:04 2025 GMT
Not After : Jul 28 05:01:04 2025 GMT
Subject: CN=3a4c7beb6139dc604872a3766a56757d03599958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:22:bc:3e:1c:cf:0b:90:97:68:5e:06:fa:
5a:69:53:ca:e1:93:34:d3:fa:e5:61:64:94:eb:24:
ee:e7:85:22:3e:ca:0c:9d:2e:2b:f8:19:87:9e:4a:
10:58:8f:42:e1:30:df:a7:55:d8:ba:18:59:44:e3:
be:de:34:58:f7:cd:f6:9c:87:32:f1:a0:e0:21:48:
60:f6:8e:2f:ea:81:02:27:62:cc:89:08:7c:31:51:
10:f3:24:26:f7:63:6f:8b:08:e0:93:a3:6b:a0:5f:
53:93:51:ea:90:1e:f3:a4:40:f0:3f:26:5d:e2:b1:
27:d3:66:49:40:55:1f:06:66:58:23:bf:7f:47:68:
3b:d3:f9:05:84:ac:0d:29:84:6a:d5:b0:b1:6a:49:
d2:e0:45:a1:69:6e:93:35:7d:7e:14:81:b5:8c:c0:
ec:a2:7d:64:a4:06:6d:ff:55:a1:72:de:73:86:a7:
f0:06:9f:c8:fc:1a:a2:9d:4b:71:45:33:2a:90:e3:
8d:72:22:39:48:d9:17:0b:10:c8:8b:4e:8d:f3:af:
59:67:86:9b:dd:15:82:fb:86:28:ab:79:50:af:cf:
e9:d2:10:4e:e7:16:37:da:0d:38:9d:fe:95:ac:8c:
2f:a6:a0:8e:2d:54:13:68:04:93:7d:cc:99:8e:8c:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:7B:EB:61:39:DC:60:48:72:A3:76:6A:56:75:7D:03:59:99:58
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:7c:60:d6:e9:26:ab:51:d5:92:ea:a8:f5:e3:6b:ea:96:
98:8e:83:26:4c:8e:6b:d9:93:a3:dc:ea:67:32:6d:5f:13:56:
ce:6e:f1:ad:e6:59:36:46:e6:ae:e0:d7:d2:15:c3:88:20:bd:
e7:ea:de:16:27:c8:17:be:fe:bb:1c:1f:9f:4f:1a:9e:ce:96:
33:20:09:21:38:85:21:2b:93:9b:d3:62:c6:dd:2d:6d:44:eb:
59:81:79:12:a9:1b:38:77:4a:9d:2e:13:5d:70:3b:2d:de:21:
a8:a5:70:58:6a:80:0e:67:6b:b2:62:20:02:52:6b:8e:ae:e5:
62:8e:50:21:f1:b0:5f:e1:87:7e:ae:7a:02:f2:9b:79:1f:8d:
80:92:d7:9b:68:88:03:95:3a:18:7e:98:7c:31:40:90:0e:06:
5c:a8:c1:a2:2a:6b:08:9e:25:4d:87:04:d1:d6:f5:2b:a3:d0:
33:09:55:27:f6:31:6c:1e:e4:b6:88:d1:51:56:4c:7a:d8:b0:
7e:ac:73:f0:8e:f0:10:f1:86:4d:07:5b:c4:76:9c:d0:0c:95:
a3:64:b0:4c:99:50:a4:bf:5d:31:24:76:8b:2c:09:06:71:a2:
77:6d:61:2b:4b:44:04:34:57:e2:b5:1c:10:75:85:8e:fb:5f:
0d:b1:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:04 2025 by rpki-client