Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: UbCirZm47v6yOZYJsPPB/Gk81d+XJEH1WLcS0ZDReaI=
Subject key identifier: 19:2A:83:86:BB:DF:86:6C:E6:7F:C2:72:CA:FB:98:5B:5D:9F:2C:92
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 01984A40FEAFCDB683D9F605DB1AB9049FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 0426
Signing time: Sun 27 Jul 2025 05:00:30 +0000
Manifest this update: Sun 27 Jul 2025 05:00:30 +0000
Manifest next update: Mon 28 Jul 2025 05:00:30 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: JhkjuxNTG0w/0dSbsUeyzxXwGShW4+ou2mpK+nd7k1U=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fe:af:cd:b6:83:d9:f6:05:db:1a:b9:04:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Jul 27 05:00:30 2025 GMT
Not After : Jul 28 05:00:30 2025 GMT
Subject: CN=192a8386bbdf866ce67fc272cafb985b5d9f2c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:71:5e:90:1f:c5:73:db:ad:5d:80:05:31:
38:07:f7:48:af:96:77:59:b1:ad:32:a7:40:d7:93:
ef:56:1f:c1:f6:47:dc:b0:42:a2:da:f2:0b:d9:a8:
21:2e:85:f0:7c:fd:31:06:a4:8f:5e:65:f3:79:c4:
da:8d:cc:9c:c2:af:52:e0:dd:d8:99:41:18:04:26:
a9:98:f0:0a:0a:69:d4:2d:6e:c9:ae:e9:6d:35:f2:
8d:04:b7:cc:f9:dd:ca:7c:e1:f9:b3:4a:80:95:4c:
9e:e0:f3:2f:0f:d9:dd:f9:1d:bd:a0:35:3b:58:6f:
86:d1:89:9e:00:f7:a6:7e:10:76:4a:b0:f5:23:16:
cc:07:f3:06:a4:cd:3d:4e:98:6a:c4:fe:16:d3:00:
0a:f6:5c:ec:56:01:01:9b:f7:60:02:50:db:1d:70:
67:e3:a9:a9:5e:f0:20:d3:fb:b8:b8:ee:6f:9b:36:
31:9f:d2:94:4a:b1:da:34:00:60:4d:20:03:cf:2b:
fb:97:d4:64:09:0a:9e:96:80:f0:31:47:63:59:74:
84:18:5e:2c:75:61:f0:13:34:b7:fd:5d:d3:bc:8e:
3d:45:69:5d:75:fa:73:bd:16:7b:2d:ce:06:0b:40:
dd:6c:19:bb:ae:55:32:38:0a:de:98:91:c6:3e:3c:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:83:86:BB:DF:86:6C:E6:7F:C2:72:CA:FB:98:5B:5D:9F:2C:92
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:01:2b:38:fc:4b:b8:c1:36:2e:26:51:13:53:9d:c2:b9:
99:47:e4:a3:4c:e8:1b:b5:f9:d8:c5:dd:1e:3f:4f:5d:f1:57:
20:6e:bc:78:1f:08:77:3c:34:59:7c:0c:e4:7f:f2:be:50:45:
f5:e0:f4:bb:14:80:5c:b7:47:0a:89:55:4a:ff:aa:fd:8c:e7:
cc:e6:46:3f:8f:ff:a2:eb:68:d4:3d:68:c1:ef:7b:f8:27:39:
42:ef:e6:ae:04:86:9f:ae:d9:98:d0:75:6d:f4:c9:68:6f:8a:
44:0e:17:45:62:a4:e8:b0:1b:67:2a:14:d1:aa:bf:d6:a9:ec:
1d:d3:a4:4a:cc:b4:a2:e4:00:3e:1d:19:6f:33:7f:28:be:0e:
ed:4e:e9:97:c2:e0:48:71:5f:10:0a:c9:d4:ac:36:69:63:94:
71:16:89:91:36:87:ea:0a:27:f1:e9:cd:29:d0:7e:da:25:b1:
aa:ba:19:62:40:0a:dd:c3:4e:11:c7:91:c9:f0:a6:b6:9e:b7:
fc:9c:d4:49:93:71:9f:2e:c6:5a:1a:78:d6:f9:8a:3f:b5:9f:
d6:73:15:de:5e:d3:dd:95:0d:a3:f7:c9:6e:a1:02:e1:68:b4:
57:20:1d:33:df:00:21:df:80:4b:5d:a7:26:f5:97:5f:46:41:
5b:06:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:29 2025 by rpki-client