Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: hFwkERT5WxMGuK4AlyX3E8RPzSSkANultbCB6NoUCbI=
Subject key identifier: B6:06:0D:88:02:FF:E6:BB:A2:D5:A4:F8:34:D7:61:93:D0:F1:0C:21
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01984A09CD776901FA33B8406719AB4331DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0460
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: 6s+8pMfvgG6LbzNnQLbznjYor1piceHYzNCynfRJZmk=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cd:77:69:01:fa:33:b8:40:67:19:ab:43:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=b6060d8802ffe6bba2d5a4f834d76193d0f10c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:f1:13:ab:4f:af:8f:18:68:ab:f7:d2:2a:
d4:a7:77:b5:5c:ed:f5:b6:c0:9d:7c:9c:34:68:9d:
f8:9b:b7:d3:6a:ed:8b:ce:a7:99:51:fc:1b:48:a4:
91:04:28:3f:2c:4a:7a:1d:b9:0d:ad:ed:a9:a4:20:
75:6a:92:be:97:a5:26:74:c4:03:d1:65:d2:83:4a:
63:7f:f4:a7:82:db:65:45:ca:56:a3:10:29:bd:d0:
7b:6b:1a:34:95:2a:ca:7d:44:88:d1:e3:04:73:7d:
b2:c9:c2:06:91:29:98:58:9d:9c:2b:05:78:28:64:
6d:d4:c5:90:10:92:4e:94:03:62:db:5e:0a:9a:c7:
5b:92:3b:28:bb:5d:e4:6a:2b:1c:de:1f:1c:20:29:
2c:20:14:f5:df:41:b8:0f:82:7b:f4:25:5d:f4:26:
ba:81:40:94:55:bb:d2:78:bc:e7:f8:41:4c:ec:f4:
d5:c9:04:14:cd:4c:fb:4e:24:da:a5:56:f6:6c:39:
69:3e:5f:9b:dd:2f:3b:ed:0f:87:f7:67:73:76:f4:
58:c8:79:2b:56:d2:b9:04:0d:ad:c5:7e:8c:a0:a1:
4b:88:22:7e:f5:70:74:ec:31:9d:21:b3:e4:c6:8b:
9c:47:24:25:66:a1:51:e6:0b:aa:af:4e:8a:ae:8c:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:0D:88:02:FF:E6:BB:A2:D5:A4:F8:34:D7:61:93:D0:F1:0C:21
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ad:87:a1:f0:43:c0:58:59:b6:9f:7f:f3:27:9e:51:a2:3d:
14:3a:ca:69:b8:ec:ae:14:c8:10:e4:8c:9d:ff:d3:13:2f:d6:
fb:d1:cb:0a:80:12:48:e9:ef:a9:28:b6:38:24:c6:be:a8:f5:
2c:30:e2:ed:06:e7:6c:de:05:9b:ba:9b:49:b8:59:3d:56:fe:
44:b0:c4:61:42:55:04:d4:25:5a:11:f9:94:ef:40:5a:d8:16:
41:27:7a:d8:63:b9:37:ef:1e:83:2f:29:ac:03:3c:09:be:db:
7c:a2:d3:2f:63:0c:64:5c:9f:38:a9:41:82:96:14:2d:fd:73:
a9:0c:ff:9d:cb:05:0e:57:0c:04:9d:8a:5f:ef:6c:01:37:ae:
20:0f:99:6c:f1:34:59:08:da:2f:9f:4e:d1:3b:70:f4:9a:8b:
7f:87:1b:74:53:2c:68:9a:82:b0:38:a1:d3:8e:82:be:bc:a7:
da:5e:91:3d:06:1a:0f:91:dc:08:0c:9e:8f:34:64:7a:83:5e:
29:fa:27:19:c8:ad:1a:07:27:7e:c2:92:ac:8e:b6:e7:60:d2:
53:c4:24:29:24:d4:2d:d4:fe:93:e5:2c:61:d3:63:dc:3e:1f:
58:62:35:2a:cb:12:03:0f:0c:d9:c3:37:37:ee:d4:6b:98:e2:
86:16:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:11:29 2025 by rpki-client