Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: wJ7HVdQt7R/PsH2TqWaH75Nlvy+OobsdBMzHbQX6aqk=
Subject key identifier: 1A:FD:B5:FA:ED:C5:2E:A2:7D:1F:2B:C6:D9:6D:6E:72:3A:0D:F1:6C
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0198499BD2BE4B03ED628328C206E52C2EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:05 +0000
Manifest this update: Sun 27 Jul 2025 02:00:05 +0000
Manifest next update: Mon 28 Jul 2025 02:00:05 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: 2YIjyvF3o/IXIlDZg5IXxZsq+H/OnLPLX+hiANi11ow=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d2:be:4b:03:ed:62:83:28:c2:06:e5:2c:2e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jul 27 02:00:05 2025 GMT
Not After : Jul 28 02:00:05 2025 GMT
Subject: CN=1afdb5faedc52ea27d1f2bc6d96d6e723a0df16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:39:13:a3:b4:33:45:bc:99:51:4e:6e:73:
f8:9e:6b:ef:a3:9b:a4:28:c6:ae:2d:fc:3e:7f:3b:
74:7c:4d:24:86:81:02:68:b0:3b:a9:93:30:97:c4:
a4:52:d2:8c:dd:ff:b7:88:4c:6d:12:c4:d5:d6:10:
a9:49:8f:31:b6:f6:03:2a:dc:42:20:66:1a:bd:ca:
b3:c6:ea:d7:d8:12:39:35:0b:1f:7c:0f:7d:11:43:
b2:56:db:6c:09:07:7e:8b:1d:cd:a5:82:ce:f2:41:
69:da:89:ef:36:56:50:be:70:72:15:eb:d7:42:97:
39:6c:d8:44:ab:47:7c:54:b6:ca:fe:e7:75:8c:cb:
6a:23:2c:27:7f:6c:dc:51:89:82:d8:5a:11:1b:fa:
07:ab:e1:a5:54:49:bd:b1:49:8d:dd:d1:3d:4e:55:
55:90:b0:80:6f:bf:ec:bf:f4:d6:51:d1:b2:ea:04:
de:11:c7:cf:2b:41:85:eb:3e:21:7c:cd:0c:4e:c2:
d7:69:d8:29:90:81:d3:fc:26:c3:0f:4d:7e:eb:0d:
e4:6a:f6:03:d2:9e:df:7f:ce:6d:66:8d:cd:48:ce:
a6:72:c8:b5:d0:f8:82:93:69:f7:29:c6:b8:04:24:
d2:2f:2a:34:a9:49:81:cf:be:df:be:28:8d:cc:62:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:B5:FA:ED:C5:2E:A2:7D:1F:2B:C6:D9:6D:6E:72:3A:0D:F1:6C
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:17:42:d9:88:f5:d1:e9:19:40:5a:68:71:23:ba:6a:ce:
5c:3c:8e:1f:5e:97:be:43:2b:92:cc:45:91:da:b8:cf:47:16:
87:15:a3:80:5f:48:82:65:ae:cc:1e:42:66:ee:12:1f:03:5e:
08:af:16:91:57:4a:9d:f7:09:f6:b8:04:a1:ae:1a:dc:06:36:
13:2e:95:b4:41:9e:a3:25:0f:42:e1:64:4b:de:0f:e2:47:4e:
58:c5:f9:eb:70:ae:ca:40:0e:33:70:18:0b:c1:cd:28:31:01:
69:ff:01:89:3f:89:4a:94:18:70:5e:00:c7:1a:b5:49:64:6d:
7f:02:76:40:e7:0f:14:d6:1f:6b:dc:db:f8:db:32:db:04:7c:
43:1b:e0:6d:d9:ac:de:a2:05:6a:e2:ed:ae:dc:fa:4a:29:37:
68:21:b7:9e:4f:42:25:99:f1:a1:c6:ee:09:41:78:67:34:71:
e0:d9:29:0a:b4:01:34:6c:87:54:55:3f:10:6d:68:87:f7:cb:
94:94:9a:e7:e0:53:18:ab:52:4c:15:0b:c5:0d:5e:4e:06:23:
2a:9d:62:82:0e:2e:71:af:56:4e:8c:77:56:13:3b:cb:cb:1d:
52:b8:f3:ab:6e:f9:ae:a9:16:67:c7:92:38:46:31:fe:1b:62:
ab:89:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:48 2025 by rpki-client