Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: te2g/5eNLpSMNgAfzGVP/DL6F1u6+BnQwuS9b5k+9OU=
Subject key identifier: B9:7C:2D:39:08:CA:16:9B:F9:8E:2C:9F:EF:B9:5C:E7:5F:79:9D:96
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 01984965319956E28E32B7D17001484BC80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:00:25 +0000
Manifest this update: Sun 27 Jul 2025 01:00:25 +0000
Manifest next update: Mon 28 Jul 2025 01:00:25 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: umSWrhbMwMRicxSRqANNHLWbyzAe4dQhIlSppo4HmHg=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:31:99:56:e2:8e:32:b7:d1:70:01:48:4b:c8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Jul 27 01:00:25 2025 GMT
Not After : Jul 28 01:00:25 2025 GMT
Subject: CN=b97c2d3908ca169bf98e2c9fefb95ce75f799d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:95:d9:2d:3c:16:34:78:34:25:69:90:8c:
1a:5b:2b:72:1a:88:56:45:65:5e:59:42:66:f2:49:
be:0d:01:34:32:6e:7d:65:16:0c:04:a6:54:a6:44:
4a:fc:e8:70:07:f2:74:98:c9:70:51:30:dc:c8:27:
dd:54:9e:cc:34:da:b3:74:63:1e:e9:e1:06:ae:d0:
96:d6:28:e9:db:89:38:19:7c:cc:f0:5f:b9:37:f7:
ea:77:3c:79:d5:11:68:17:7b:b9:3d:ba:80:96:9c:
ac:49:b1:df:ef:24:94:54:e3:ac:f2:92:68:80:bf:
ff:ae:6c:56:94:7e:09:3b:a5:15:a5:0f:e1:5e:41:
86:18:be:31:bb:9c:6c:6b:96:af:3d:26:9a:1d:ff:
3e:b1:00:3d:13:d7:71:7e:36:64:80:03:e2:97:31:
75:78:30:33:01:48:b0:39:d5:79:3a:32:cb:87:e6:
31:28:0d:7c:dd:62:fc:45:4a:2c:03:9e:ca:75:93:
15:a0:4c:46:f1:38:9f:8d:24:c9:ae:9a:84:8d:a4:
26:63:56:a4:dc:65:6a:1c:ed:b6:77:98:c7:38:ff:
5c:60:a9:f2:77:4b:97:90:e3:f5:18:2a:50:92:4d:
05:91:8c:13:82:36:b0:91:e1:b6:db:03:e2:85:d5:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:2D:39:08:CA:16:9B:F9:8E:2C:9F:EF:B9:5C:E7:5F:79:9D:96
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c4:16:4a:5e:8d:f0:7a:6e:dd:fa:ef:e4:c4:b5:51:27:ff:
3a:c2:5a:5d:ca:6a:78:d0:fb:dd:97:e7:66:76:27:1c:e9:1a:
f8:c0:e7:e3:c2:69:7b:bf:a0:57:89:9e:56:4f:65:6d:85:31:
f5:5b:fd:d0:55:e7:d0:57:a2:6f:09:62:b0:20:ca:0a:ff:7a:
da:8f:f5:01:1c:10:67:1c:17:eb:3f:2c:a3:5f:79:a7:ce:c2:
59:3e:82:a8:3e:e3:bf:9f:42:31:28:7d:f5:2e:1a:be:b1:35:
11:bb:9a:c9:68:62:d0:8c:70:5b:5e:e6:97:32:d7:6b:5b:c7:
68:f4:d2:84:92:3b:c6:b6:e4:da:21:d6:2e:f3:4a:b6:ea:b4:
c1:37:ee:98:42:17:ee:b3:ab:fb:37:ad:bb:7c:c4:34:c9:e5:
bf:ec:09:dd:59:f3:cc:d6:b8:f8:f6:2b:e6:b5:62:5d:89:4f:
b7:aa:c1:ca:15:46:47:aa:8f:4b:a9:c1:49:25:71:af:2c:22:
cf:02:41:e9:86:5d:97:54:dd:cd:54:07:fc:aa:dd:b2:d8:cd:
04:69:32:98:2f:a1:55:7d:38:e4:c8:ae:d0:eb:04:4e:11:86:
7f:fb:a2:5f:1b:81:b1:83:f9:73:af:f3:e7:5b:09:6d:5d:4e:
d4:43:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:04 2025 by rpki-client