Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: ylFYVZ1K7kFm48R+D3HiRQdV4iCWFjXQ+lOfumgLIao=
Subject key identifier: A5:C9:B8:56:4E:78:43:2E:22:E8:38:27:96:0F:38:F1:6A:93:F6:9E
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019849D2D27515DF8BF8E3EF74401925BB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:09 +0000
Manifest this update: Sun 27 Jul 2025 03:00:09 +0000
Manifest next update: Mon 28 Jul 2025 03:00:09 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: rsISa6GjO2UsgkwlAAFO1MnYXgYzB+2I255roaZrRDc=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d2:75:15:df:8b:f8:e3:ef:74:40:19:25:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jul 27 03:00:09 2025 GMT
Not After : Jul 28 03:00:09 2025 GMT
Subject: CN=a5c9b8564e78432e22e83827960f38f16a93f69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:c5:cb:43:71:2c:33:7a:4c:61:1d:20:56:
25:9e:a0:b1:15:90:48:ec:92:16:c5:19:41:89:b6:
2e:70:a9:42:1f:b6:6c:82:76:bd:c0:4a:b7:67:f6:
88:0d:e4:22:80:4e:60:ad:59:a6:e4:f9:ec:eb:82:
69:cc:48:5f:5c:09:93:b1:6d:06:cc:0f:11:2b:2c:
23:5a:95:8c:f1:94:a1:27:6d:de:36:76:42:fd:f0:
97:44:7a:2d:2f:59:29:df:e1:74:e3:33:85:da:49:
10:d5:0f:8a:0b:2c:be:88:93:93:cb:e3:11:ba:e7:
74:85:ff:31:85:03:09:e1:d5:73:c0:7c:f9:1f:95:
5c:e8:97:c8:0e:e1:26:65:db:6a:bb:b1:e5:93:56:
da:0c:4c:97:c9:f8:23:1f:0d:d6:1a:ea:1d:54:f0:
10:11:74:cd:b8:df:68:7c:6b:47:3a:8a:8d:4a:e9:
e9:14:fa:3d:74:75:ce:21:03:21:ea:be:3b:51:e3:
7a:db:c7:f2:6e:8c:ad:c7:43:33:e8:16:1a:c3:41:
17:9d:e1:48:7d:95:07:0f:c5:ff:ca:9d:4e:7b:65:
b8:6b:a5:0b:90:f1:d7:07:4f:ed:54:e4:bb:48:11:
7f:e0:9d:b7:28:9d:bb:e5:0c:a0:92:ce:7a:c7:73:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:B8:56:4E:78:43:2E:22:E8:38:27:96:0F:38:F1:6A:93:F6:9E
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:30:6c:e5:d8:57:92:49:ab:b3:dc:c3:8d:1a:08:55:dd:
1c:7a:c4:18:ac:ba:0d:8c:3b:6d:a4:70:39:34:6b:22:40:f6:
1b:ef:5f:ab:75:90:60:b5:aa:91:c0:85:95:b9:33:a0:83:15:
30:f4:d2:79:24:47:7d:10:92:52:fa:35:5d:e6:f8:2e:9e:05:
f6:67:4d:d0:9e:cd:7a:a6:ff:69:f8:bb:04:9f:4a:53:f1:ee:
26:5e:0b:de:34:84:1e:81:04:3a:d9:d4:8e:54:b5:2c:1d:a5:
a2:ab:a5:a5:1d:91:aa:a8:0c:17:41:4f:36:4b:33:23:4b:3a:
57:54:ce:78:e4:49:64:69:06:6e:0a:1f:cc:da:7e:93:44:a8:
80:06:2d:d7:fc:74:af:dc:35:66:37:cf:74:90:8f:3a:1c:60:
c2:a0:52:79:0c:0e:0e:9f:e5:96:47:ff:98:7e:95:9d:01:48:
70:9a:19:6c:f1:17:81:a3:78:6e:11:5b:4a:f9:12:56:3f:a7:
bd:d7:85:c6:90:f8:9b:17:c5:0b:1d:03:f1:f1:26:91:ab:f6:
0c:be:0d:d2:94:f2:c2:a9:5a:40:e2:d3:68:83:1a:10:5e:42:
a2:fc:f5:c4:c6:e1:ab:14:01:a0:a9:93:f1:c1:34:d1:80:db:
7b:2e:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:43 2025 by rpki-client