Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: pjLTiAE0ztHZh0QYSwBlVty7XR/L3VtUzeIvtnCkxkw=
Subject key identifier: 13:41:10:C9:18:34:C9:D5:63:6D:8F:C2:98:72:9D:23:1B:BA:78:3A
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019847772454D37AEDA0C2F83B8D834339E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:46 +0000
Manifest this update: Sat 26 Jul 2025 16:00:46 +0000
Manifest next update: Sun 27 Jul 2025 16:00:46 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: 584HZusT8NXVuaqxeoC6Pq/LiyMqf6T/uXqr/Nzpz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:24:54:d3:7a:ed:a0:c2:f8:3b:8d:83:43:39:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jul 26 16:00:46 2025 GMT
Not After : Jul 27 16:00:46 2025 GMT
Subject: CN=134110c91834c9d5636d8fc298729d231bba783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:ad:b0:0f:c3:5e:b4:21:3d:0c:ed:9c:f9:
bb:c8:08:8f:5f:44:4a:50:ad:9a:56:5e:80:06:4d:
78:25:ba:c1:45:46:45:d3:8a:32:60:65:7a:5c:9c:
2b:f9:51:a7:55:1a:b7:f8:54:88:68:b8:88:9e:12:
d2:3e:6a:1d:f7:7f:96:62:16:18:7c:90:f2:00:6a:
03:11:88:c4:39:3d:42:e1:6e:1d:30:fd:f1:b6:9b:
e5:e7:83:f8:dc:82:cb:11:7c:9b:9b:53:2e:70:57:
8f:e0:97:cf:60:93:73:dd:97:53:8a:1a:a6:f9:a3:
f4:f4:25:e5:fe:8d:94:14:a5:11:96:fb:20:76:a8:
c9:d8:61:0d:84:b1:8e:c2:5c:f3:f3:8e:0e:09:58:
d9:30:bb:61:86:eb:41:a2:0d:06:3e:75:da:b9:8a:
21:d7:8d:da:3b:85:7d:4f:b2:62:b9:cd:29:34:ae:
35:a7:61:3c:ff:a7:44:5d:bd:41:62:95:45:f1:2c:
d2:12:f1:58:2e:28:f9:40:83:8a:3c:48:cc:8c:12:
02:0a:c7:ad:61:b3:5e:77:54:0c:93:e7:4f:a3:00:
d9:56:5e:c7:db:6e:b7:53:e6:9e:bf:3c:62:0c:3e:
a5:84:f6:10:27:ca:5e:ad:8e:34:84:4d:72:34:e6:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:10:C9:18:34:C9:D5:63:6D:8F:C2:98:72:9D:23:1B:BA:78:3A
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a7:29:9b:24:2b:ee:fe:4f:40:f0:b7:a0:6d:79:ee:b1:26:
a4:5c:6d:68:4b:1c:30:9c:a2:7b:fd:4f:d9:0d:5e:55:37:eb:
af:12:3b:ea:2b:b3:a0:8f:4e:82:b5:e9:97:dd:ee:97:30:ec:
bc:08:e7:d2:7c:2a:13:2a:6f:a8:11:b9:6a:d0:ff:78:3a:1b:
d6:e4:45:d5:24:cc:0a:17:b8:ca:74:d1:25:64:26:e6:fb:9f:
e7:00:62:cb:92:12:e3:1d:b9:18:a7:58:a7:f0:ef:c4:e5:9d:
05:3e:83:f0:53:c4:fb:6c:dc:da:1e:85:7e:74:b5:cf:bb:4b:
73:79:ee:b0:ce:ed:b3:fd:58:a5:7d:8c:f9:c4:a9:89:75:e7:
89:4c:2d:f4:e8:ce:f3:99:35:b1:70:bd:74:ac:67:87:45:82:
1a:1f:95:27:10:e8:55:cb:6f:ff:d5:27:33:b6:c1:a9:99:87:
09:43:7e:78:8d:c0:f0:9e:ff:a9:ef:26:18:59:ef:7a:b2:75:
5d:58:3d:14:b5:ea:f3:d2:4f:f0:9a:e3:de:9a:b7:d0:23:a0:
7e:47:fc:eb:74:45:54:03:85:e0:ee:97:39:f0:81:52:34:de:
65:c2:b9:b0:36:cc:e4:64:4f:53:6a:b6:0d:e5:aa:fa:16:57:
95:aa:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:30:03 2025 by rpki-client