Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: 5ANp4At9En9hcdhxukgOnxMUu1ZIL+9rp5BP6QZTikA=
Subject key identifier: AF:83:74:A0:41:38:7A:85:A1:6A:D8:A0:F6:48:2A:B6:9E:E9:40:C1
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 0198481BB2E026C8BADF80C6130317E4A345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 19:00:31 +0000
Manifest this update: Sat 26 Jul 2025 19:00:31 +0000
Manifest next update: Sun 27 Jul 2025 19:00:31 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: JZxG+G/191auF9w5avyXUXD4bobatI+ONIvq5ON45II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b2:e0:26:c8:ba:df:80:c6:13:03:17:e4:a3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Jul 26 19:00:31 2025 GMT
Not After : Jul 27 19:00:31 2025 GMT
Subject: CN=af8374a041387a85a16ad8a0f6482ab69ee940c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:2d:51:28:84:4a:a6:8c:22:50:15:18:92:
4a:2c:3c:07:cf:20:74:68:1d:15:ab:cc:dc:00:20:
51:bc:1c:a0:b9:e5:30:c0:6b:f6:bc:a1:57:82:db:
c3:e1:94:3e:bf:0e:23:d1:c4:5e:d9:71:c8:a9:47:
f0:c5:53:48:db:76:da:e9:5a:b0:9e:c1:85:14:7c:
b1:e7:8b:8e:9f:dd:e9:32:2b:01:32:69:72:16:e1:
03:48:60:41:4a:e8:12:b6:42:92:b3:36:27:e9:09:
b6:bf:91:6f:82:92:25:3f:ae:95:44:ad:2b:dd:95:
48:0a:8c:37:93:48:e3:91:b2:fa:fc:c2:58:0d:46:
27:71:e9:95:ea:17:39:85:b9:eb:eb:26:3f:e2:34:
fa:f2:6d:e8:aa:f6:5c:d7:9a:c5:aa:0a:86:75:4d:
c4:c8:ba:98:4a:e9:ec:20:7f:a2:1e:26:db:04:c5:
9a:da:b0:10:9a:55:a6:89:b7:ab:ab:85:4b:ef:5a:
7b:65:fb:51:52:e5:0b:70:a1:6c:b8:43:75:f3:44:
f5:fb:04:c9:17:3c:08:52:30:c5:4d:3c:39:9d:fc:
bc:e5:93:85:1d:0d:57:a7:a6:80:ba:45:78:44:3b:
06:8f:91:2e:e2:e5:fa:7d:1c:08:a7:d4:da:a4:75:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:74:A0:41:38:7A:85:A1:6A:D8:A0:F6:48:2A:B6:9E:E9:40:C1
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:61:a1:82:72:73:3b:57:cd:60:64:30:b7:ad:25:0a:d4:
c9:d8:6f:63:a8:1a:aa:0a:b5:5b:e9:03:77:e7:db:d2:36:7d:
ce:a9:a7:d8:6b:95:dd:c2:e9:37:5f:46:40:30:05:6c:36:47:
62:c2:a3:99:97:a9:f5:cf:09:e3:90:a3:cd:53:12:f6:24:77:
6e:5f:f3:d7:7e:6c:a9:4b:9a:46:0f:e7:7d:64:31:de:3b:fa:
95:7c:3c:04:4a:b8:25:c3:cd:45:6e:26:9f:2d:14:05:83:3c:
b8:a4:42:b9:2d:69:70:36:f1:bd:fe:01:65:97:54:32:78:6b:
54:c6:3d:2e:38:0c:d8:cf:21:5e:60:e2:71:89:af:8e:29:90:
0d:1a:6b:5c:36:0d:ce:55:dd:c2:eb:bd:73:9e:60:b0:6f:ce:
4d:cf:79:1f:b5:b4:b1:23:c7:6a:25:34:cc:29:a0:f8:cb:51:
22:3e:77:1c:cc:8e:67:21:b2:87:a8:1c:d9:ee:44:09:cb:76:
86:73:b9:27:61:65:bf:15:5c:77:40:57:1c:6f:62:0a:96:a4:
31:46:ef:41:37:1e:ce:a8:fa:22:ea:5b:91:53:1f:20:09:3f:
eb:39:c7:12:70:7c:63:e8:30:c7:b4:79:5b:31:84:e4:9e:2a:
1c:bc:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:35 2025 by rpki-client