Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: ADxNFA5rZNPx+luxbqhyhW+KcM4Ib9AguCrsMZOvCkM=
Subject key identifier: 65:AB:44:6E:2F:9E:D3:6A:98:28:5E:86:9F:C3:1C:64:AF:69:2E:4D
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019847ADCBA262EF8B0D70553D93DDE420F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0C4D
Signing time: Sat 26 Jul 2025 17:00:28 +0000
Manifest this update: Sat 26 Jul 2025 17:00:28 +0000
Manifest next update: Sun 27 Jul 2025 17:00:28 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: cnOlCm2mmzX74R+Yj/IU0TQPnaAPsOynaTU7+Wv0cEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:cb:a2:62:ef:8b:0d:70:55:3d:93:dd:e4:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jul 26 17:00:28 2025 GMT
Not After : Jul 27 17:00:28 2025 GMT
Subject: CN=65ab446e2f9ed36a98285e869fc31c64af692e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:2c:24:c9:9c:c9:02:69:e0:d8:b3:95:8d:
2a:f0:04:14:7c:cd:48:f5:31:9c:4b:3a:dc:5c:96:
48:e3:d2:85:0e:ef:5a:05:18:64:c8:34:af:93:c4:
7d:d7:cc:09:15:77:fe:4c:7f:33:6e:f4:35:1a:63:
18:8b:ac:0e:c1:59:db:be:51:c7:8e:2d:11:04:84:
98:06:2f:28:21:48:2d:ff:98:60:59:60:3a:8a:db:
18:1b:71:7b:c9:43:72:60:55:04:23:ef:2a:ed:2e:
68:11:53:e7:3e:5e:9a:ea:bd:2c:13:9d:7e:2d:01:
4f:39:bd:cc:e1:ba:2e:8c:fd:67:39:64:34:ad:f2:
de:25:11:b2:ab:0b:1f:ad:e3:98:6c:db:94:29:a1:
9c:14:a6:c2:10:3c:49:0c:98:4b:1b:74:b4:b9:e2:
b2:90:91:7c:df:44:2f:2d:01:cd:1b:24:9d:bf:cf:
14:4e:72:92:78:9d:ef:d8:55:f5:c5:f1:0f:3c:0d:
79:c9:fb:71:c8:6f:93:2e:a4:ca:c2:32:45:4b:cc:
d9:5c:84:af:cc:4c:e4:05:cb:17:af:46:b0:93:9b:
62:b3:b9:44:37:64:c2:22:09:a8:fa:ee:2c:40:82:
42:39:5f:ce:1f:8f:4f:c5:a4:ab:f3:be:cb:bf:de:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:44:6E:2F:9E:D3:6A:98:28:5E:86:9F:C3:1C:64:AF:69:2E:4D
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:13:c2:45:12:c4:1d:3a:fd:7a:48:5e:eb:73:50:34:cd:61:
ca:c0:fc:ed:8d:72:43:2c:63:2d:03:0b:a3:0f:d7:dd:c3:fb:
22:9a:a9:e5:a5:9c:e5:b0:54:c6:60:49:01:76:fd:17:42:69:
59:37:e1:44:bf:58:42:bb:b1:bb:5d:06:39:d9:18:d3:1d:5e:
55:0e:56:4e:c8:2a:2a:5e:cd:09:fd:2d:e1:1d:0f:dd:fc:ce:
92:04:05:b2:c8:1b:e6:db:8c:d1:1b:ed:2e:c9:b7:92:18:a0:
0c:64:15:3f:7b:70:11:df:04:d0:dc:ed:44:1e:5d:16:25:34:
c0:a2:c0:47:30:0b:85:5f:8a:eb:db:aa:df:7b:8e:36:6f:2d:
30:9a:37:31:28:1b:77:75:87:4e:d0:fd:d3:8a:30:c3:67:2e:
c3:a4:60:6f:d6:d2:ab:cd:3f:55:58:40:4a:13:84:bd:da:36:
bf:3d:0a:43:8d:c3:19:d7:9c:92:13:b0:08:5f:53:45:49:c7:
1c:08:a8:1d:49:1a:c0:7e:f5:cb:d3:82:41:0b:0c:25:86:f6:
5f:4e:71:95:11:a0:bb:fa:d3:c5:60:37:3a:73:13:1e:ab:03:
71:3f:b3:c9:09:7e:5e:a9:a5:2a:20:70:f3:15:ad:cc:03:7a:
53:5f:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:40:41 2025 by rpki-client