Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: CmoQ3i54HC9orugpKqorOVe13KsV0AjhpBYfq+AeQNs=
Subject key identifier: 71:0F:D8:44:A3:DB:B2:A4:E1:58:75:F1:40:F5:F1:C6:B6:83:29:26
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01984965F4D3F2CFEFABA0D15A5628C735DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: EnUry1OHKgdxQy/goRcSf1clUn93lKlg/JUXNsJZaZM=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f4:d3:f2:cf:ef:ab:a0:d1:5a:56:28:c7:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=710fd844a3dbb2a4e15875f140f5f1c6b6832926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:c7:a2:3e:a0:de:c9:6b:c4:dd:72:0a:79:
3b:c4:1d:a6:2c:09:01:43:52:ef:d3:7b:18:c3:e2:
3b:12:02:f7:56:b7:a0:c6:75:87:04:87:ad:cc:1b:
b8:95:2d:e6:0f:fc:28:c5:58:4a:bb:4b:c7:b1:85:
df:4a:71:14:b1:bb:af:8e:58:d2:10:9f:d4:6b:5c:
f3:1f:a4:bf:ad:ad:8d:93:e7:4b:cd:29:d6:bf:9e:
53:97:db:98:e8:22:b7:34:a0:b4:e8:ec:9e:f0:47:
9c:97:4b:d2:58:34:5d:b5:03:d8:a7:01:fd:8c:9d:
81:76:10:31:3d:d7:3c:3c:5d:88:81:e9:bb:58:b1:
10:15:8d:b3:ae:4e:76:bd:de:a0:ac:0a:f8:42:ac:
97:80:0a:9f:23:f5:ca:4a:f8:51:8d:09:1e:6b:68:
8c:29:af:eb:a8:58:31:a5:da:64:00:57:6e:1f:b5:
8b:3e:98:7a:01:9b:f5:5e:d5:f6:93:2e:9d:89:44:
64:1c:08:29:b1:bd:d3:dd:af:f6:85:39:63:08:9c:
04:42:41:a2:fd:9c:c2:18:c2:c3:bb:ee:b4:72:21:
60:f2:90:db:ea:3b:8c:8c:88:fc:50:97:ec:b6:1b:
1b:61:29:f1:a9:e7:40:90:ac:29:16:4c:9a:88:e1:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:D8:44:A3:DB:B2:A4:E1:58:75:F1:40:F5:F1:C6:B6:83:29:26
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:2b:a1:f7:04:73:3a:e6:2c:ec:97:b5:44:a5:30:b9:f5:
4d:e0:20:fe:c2:a0:3e:7e:2f:eb:72:2b:47:a6:4a:f5:27:24:
dc:56:17:a4:7f:ab:89:9f:b7:28:09:a5:96:1e:f8:1c:e7:f6:
e1:69:7b:77:d6:51:c4:ac:b9:bb:0e:17:01:28:88:4d:e7:9e:
3e:3a:95:49:db:91:fc:34:54:9a:2b:99:1f:3f:26:c2:65:1e:
60:e2:0d:3c:07:cd:74:70:3f:a7:21:c5:68:e1:2f:c2:31:a4:
db:8f:50:15:95:42:a2:4c:7f:fb:31:1c:ca:c5:f9:06:d4:13:
a9:85:33:c4:5c:67:9d:c3:51:be:13:45:f1:a8:c0:d2:f9:b9:
df:33:e4:cf:61:1d:76:07:82:9d:d8:ff:74:5c:3c:01:e0:e0:
c1:0a:92:bb:a6:45:30:8f:44:4a:4a:17:d3:68:7e:46:24:1f:
91:9c:21:68:64:02:98:6f:7c:e7:fa:01:59:17:67:f9:4b:fc:
6e:af:04:1a:b2:d9:84:28:2e:3a:00:35:54:3a:42:23:51:0a:
3c:7f:f9:6a:dd:70:2d:ff:96:7b:ec:ed:04:8f:5f:10:54:98:
53:76:74:cb:99:ed:a5:7a:e5:21:0b:5d:49:c4:11:11:95:51:
e1:45:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:51 2025 by rpki-client