Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: OPlSVDmf2YpsXIFCPO0qGzx2aBY6OoiK2TiCstpbKD8=
Subject key identifier: E4:90:B7:26:9A:88:1E:BE:5B:E0:C6:97:0F:A9:9C:EE:A3:0C:ED:A0
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 01983E3D33F45F402C0EE1E542330418B2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1590
Signing time: Thu 24 Jul 2025 21:00:55 +0000
Manifest this update: Thu 24 Jul 2025 21:00:55 +0000
Manifest next update: Fri 25 Jul 2025 21:00:55 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: IxFEe/J1E27G6W9oTvLe6zOtp+tpCCd486rlPGQ08TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:33:f4:5f:40:2c:0e:e1:e5:42:33:04:18:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jul 24 21:00:55 2025 GMT
Not After : Jul 25 21:00:55 2025 GMT
Subject: CN=e490b7269a881ebe5be0c6970fa99ceea30ceda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:3b:e4:e0:6b:9a:e2:01:1c:e1:29:03:2b:
c6:8c:2c:e1:1e:13:14:aa:78:b5:e1:b0:f3:53:25:
b2:9f:1f:5c:01:b6:6b:58:b4:34:fb:ac:cc:c1:e5:
40:cb:1e:1f:2a:8d:71:be:e1:58:27:5f:5f:10:92:
84:64:a0:42:98:64:fa:7b:93:0d:9d:f5:1a:73:68:
fe:c1:b9:e3:27:54:67:bc:32:1d:f3:37:50:22:1c:
a3:28:e4:c9:47:30:0c:ef:89:0a:7d:d1:bd:07:1a:
38:73:74:1d:9c:b6:be:2b:70:f6:18:d0:b4:2b:e8:
be:90:e4:e8:a3:3f:e6:55:78:6f:ef:19:ae:23:f0:
ef:ca:f8:b2:a0:3d:21:fc:d6:cd:21:7e:62:3d:71:
ba:40:07:9c:b0:08:e7:a2:5c:de:67:14:6b:e9:84:
bd:d4:b2:e7:79:da:80:6f:80:b1:56:71:2d:78:08:
80:45:45:de:66:8a:ae:95:47:5b:91:36:38:75:47:
2b:58:0b:38:2c:24:14:27:ac:aa:67:3c:df:f6:96:
23:3b:1f:f9:9e:35:ac:f3:33:cb:a2:9a:58:71:98:
8e:0b:68:c2:4e:93:ed:31:eb:43:b1:d4:83:55:e5:
bd:e4:dc:83:ef:95:5d:0e:c0:9a:27:ac:e9:5b:78:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:B7:26:9A:88:1E:BE:5B:E0:C6:97:0F:A9:9C:EE:A3:0C:ED:A0
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:03:56:7d:32:04:e1:72:4e:89:0f:b0:f9:e0:f6:1c:ab:
5f:32:15:c0:ae:ae:05:ed:0a:3f:26:2b:17:30:e8:2e:57:b2:
02:d5:82:a5:a5:25:ec:9a:da:a4:c7:f5:bf:a3:2d:91:de:90:
99:e1:26:33:d7:af:48:6f:ad:3b:91:c8:21:de:21:d3:39:04:
7b:8a:32:a4:20:ef:b8:55:1f:ef:66:33:87:cb:43:92:46:c1:
42:b2:bd:a0:5a:79:73:88:17:f4:5a:65:64:81:18:0b:f4:a7:
54:c6:6c:88:44:98:b2:4c:81:f3:ef:e4:32:15:87:f5:4b:b5:
fa:32:7b:d5:30:3f:6c:f7:fd:82:d3:b2:e4:c8:6d:a9:4e:6d:
67:b1:d3:fd:91:eb:ee:2d:91:d9:50:17:01:09:d9:88:86:6b:
30:78:32:cc:4a:84:5d:2e:7e:1b:fa:52:14:0d:e7:54:2a:97:
45:9f:78:0f:af:84:c1:06:cc:ef:10:a5:e7:89:7f:53:82:36:
4a:e9:10:b5:14:7b:a0:8c:f6:1c:cd:01:01:67:99:12:6e:19:
b8:f5:ff:e5:29:46:af:29:a1:5e:49:c3:c3:19:94:77:d7:fd:
67:eb:f3:fc:73:08:96:4a:80:d5:c0:ec:a8:8f:b5:3c:eb:df:
d5:b3:92:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:17 2025 by rpki-client