Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: grkIPvfIDatifphmsSDAMZol1LS8kcqllhbMwtFbJTk=
Subject key identifier: 59:3C:24:84:6D:81:3B:26:3B:1F:77:C7:62:E5:D5:64:09:B2:7C:5F
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 01984A09DDED935392E7C90F37C272367865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 04:00:17 +0000
Manifest this update: Sun 27 Jul 2025 04:00:17 +0000
Manifest next update: Mon 28 Jul 2025 04:00:17 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: lpvxH2EiEvSaejX4Knm0iCsAdzRZ+SuBbpJKiobD7aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:dd:ed:93:53:92:e7:c9:0f:37:c2:72:36:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jul 27 04:00:17 2025 GMT
Not After : Jul 28 04:00:17 2025 GMT
Subject: CN=593c24846d813b263b1f77c762e5d56409b27c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:93:45:bf:66:0f:55:21:51:87:c0:bd:86:
9e:e8:a2:80:4e:f9:94:b2:72:64:21:ff:d2:1f:d8:
4e:26:2b:cf:d0:0d:a8:af:85:9b:c7:ee:70:d7:87:
f3:40:77:d3:77:17:84:46:93:ff:ea:22:19:b9:2f:
00:ad:fc:92:80:86:77:ba:e1:46:7b:a9:50:85:2a:
13:6f:79:ae:79:19:53:15:27:18:3a:7c:13:6b:52:
bc:85:de:dd:97:b0:bf:f6:0a:e8:35:8b:d0:2c:ec:
7f:46:2d:15:ec:b5:58:1a:32:d6:76:45:9f:de:65:
cb:4e:9c:0a:0a:8a:39:8f:43:dd:ab:ee:20:0a:2e:
93:53:1d:19:73:d3:02:fc:43:d3:b5:35:ad:6d:d9:
1b:75:7f:a7:7e:41:69:5f:b2:6d:4c:fb:22:77:f6:
7a:9e:f0:34:bd:86:7b:22:29:59:ac:7e:65:db:85:
96:1d:45:53:1c:f0:09:1e:19:5c:8f:05:99:bc:24:
a3:44:79:50:40:5a:5d:f7:b6:4c:e7:fa:e1:92:38:
73:bf:31:95:d6:ec:c1:ad:24:93:d7:66:ef:77:5a:
35:b9:18:3d:a7:07:4f:c2:b6:6b:f2:36:f6:32:1f:
81:12:7e:1b:98:0f:1c:16:15:17:11:be:bf:9a:59:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:24:84:6D:81:3B:26:3B:1F:77:C7:62:E5:D5:64:09:B2:7C:5F
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ee:5c:5f:5b:c2:40:ee:7a:f1:d3:f6:99:52:20:3b:86:e7:
20:88:8b:74:0c:92:22:c7:6c:40:cb:ca:18:0c:c1:be:3e:77:
38:91:2d:d1:65:51:41:5c:0c:b6:67:56:bc:e2:fd:6f:04:5c:
46:9c:c5:bc:ec:1c:9c:95:bf:47:ff:17:d2:fb:a7:34:16:ca:
1f:c1:ce:aa:98:23:4b:16:2e:e4:d9:87:20:4f:47:8f:26:43:
b9:27:fa:69:48:32:b3:ce:7e:8f:dd:fb:a5:14:85:9a:93:be:
a3:6c:72:74:f8:79:62:1b:c0:a3:ea:38:42:b1:96:4d:f4:ee:
b4:c4:c1:1d:d1:16:81:b4:4b:30:b6:33:d2:77:e8:16:14:dc:
4b:96:8f:6e:ab:a8:75:4c:94:57:2f:01:2e:85:f9:7e:d8:78:
b6:94:78:d9:a3:63:df:10:2d:f6:d2:55:95:4d:65:27:a1:53:
7b:bd:cb:57:5c:ca:a8:08:56:7a:e4:28:bd:0e:11:5b:15:2f:
4f:85:ad:a6:40:bc:05:bd:df:e4:69:64:7d:54:6b:d1:00:87:
e3:32:58:da:b7:e0:c0:d5:df:73:c4:54:d9:80:89:0d:d9:bd:
2d:4e:b0:53:a1:e7:1b:3a:7e:45:b4:fe:6d:dc:ec:49:91:d3:
00:90:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:50 2025 by rpki-client