Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: QpkvtYDVF5M5QcNKAiWCCFp69xmaAQRVsM1JOFn4nUY=
Subject key identifier: 99:ED:6F:19:4C:94:A0:7B:2B:6F:F5:A6:B5:A5:01:B4:5F:43:5F:C4
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 0198458964CE089437BBA9F36FD8931F5660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 076F
Signing time: Sat 26 Jul 2025 07:01:28 +0000
Manifest this update: Sat 26 Jul 2025 07:01:28 +0000
Manifest next update: Sun 27 Jul 2025 07:01:28 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: ebB/H2hdAlZ0uOSfN1w2gTr4QrW7QUNLxWpYftZfjwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:64:ce:08:94:37:bb:a9:f3:6f:d8:93:1f:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jul 26 07:01:28 2025 GMT
Not After : Jul 27 07:01:28 2025 GMT
Subject: CN=99ed6f194c94a07b2b6ff5a6b5a501b45f435fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:87:22:92:00:c2:91:bc:f2:da:55:de:78:
44:c6:b4:76:84:e4:6c:f4:d6:32:ba:54:d1:af:2c:
b6:96:16:3e:ff:88:da:eb:c1:a4:56:ed:a7:c5:f2:
1e:56:98:14:6e:0d:af:16:85:a9:fa:09:43:7c:5f:
88:61:bf:9d:da:bc:0e:5e:b9:4e:3c:b7:56:5b:c6:
43:79:20:db:2d:96:5c:e4:d6:ad:7f:3b:06:44:21:
09:7b:3c:d6:fe:cf:cc:ba:df:49:76:d5:5f:eb:b6:
40:b7:1d:cc:9e:4b:f2:5a:d4:68:23:c5:f6:4c:02:
33:dc:62:80:72:f3:3d:d1:78:d1:aa:a5:b1:ea:e8:
e0:e7:4d:7c:9b:1a:65:65:69:f5:d7:ce:82:f3:22:
44:9f:3a:17:8e:b0:10:ab:e8:13:43:97:08:00:65:
5f:36:78:a6:61:03:64:32:fe:1f:f4:1f:8d:0e:51:
bf:03:2e:96:c9:92:e4:58:a3:91:b9:ba:a4:91:52:
3a:15:8e:f4:10:22:48:14:fb:16:70:26:ce:a3:76:
84:0a:83:08:e7:d3:7c:7e:15:45:b1:de:e9:2f:79:
28:bc:b8:78:19:9f:c5:f5:fb:21:65:e3:34:d9:6b:
2b:1e:57:0b:79:f3:a4:fc:ff:bf:f6:a9:f8:fe:aa:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:6F:19:4C:94:A0:7B:2B:6F:F5:A6:B5:A5:01:B4:5F:43:5F:C4
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:66:30:ef:85:02:f0:4f:f0:f0:ac:5c:a2:b6:01:01:15:
ff:d2:ac:50:63:9c:26:37:db:5e:c1:f8:cf:75:36:b2:ca:31:
cd:5c:31:b1:57:77:6d:a5:7e:85:21:55:69:ba:68:f5:90:85:
13:db:f9:8b:2c:da:05:d8:fa:8d:4e:ff:8d:98:fb:1c:2a:92:
b6:5d:4f:fd:5e:8d:29:6b:3c:b3:5c:de:a9:ae:03:ca:f9:6b:
c4:df:7c:f5:e7:a0:16:48:68:4c:d4:54:c4:a9:31:96:c6:50:
97:06:2a:52:8e:c5:0f:cc:e4:58:df:07:c5:b0:62:5e:36:da:
08:05:d7:aa:d0:e4:0e:68:b2:dc:5c:00:da:39:e7:16:da:cb:
36:c4:aa:ac:a6:38:55:88:20:bd:ab:0e:90:e5:6d:ec:9b:89:
c2:70:56:13:d0:fb:8d:28:a9:af:3b:ad:e8:7b:b1:b5:4d:68:
b9:5d:2f:49:59:3a:b3:17:4b:b1:08:0d:93:a9:6b:be:a8:df:
15:25:c5:2b:74:e3:7f:de:1c:5b:94:0a:f9:bf:70:6b:f2:2a:
be:f5:a9:34:af:2a:b5:53:e1:19:2f:72:e6:64:df:24:9a:42:
73:17:25:0b:a8:92:f4:5f:e4:f1:de:8b:f8:4c:6d:ce:36:d5:
3b:45:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:05 2025 by rpki-client