Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: WZeOtrAC4g/oNC3or7HLHhVvpe/m1xsD1RJa9hym8yo=
Subject key identifier: 5D:54:64:2F:4B:94:AD:7C:BA:93:B2:04:E4:ED:FC:65:31:3E:1E:D9
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01984C660E30A97D9304A51A3C71C26472B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0ABC
Signing time: Sun 27 Jul 2025 15:00:13 +0000
Manifest this update: Sun 27 Jul 2025 15:00:13 +0000
Manifest next update: Mon 28 Jul 2025 15:00:13 +0000
Files and hashes: 1: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
2: Eb67nR4_r4j8Qlyfns20ti-cJT8.roa (hash: lFVr25uX8drF2iD9dDrV81ECiahOTdUT7rmBW8WFEjc=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: XS5ri+04mraMNdLyLN2uuh33cCzArlTzJtNpYncurnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:0e:30:a9:7d:93:04:a5:1a:3c:71:c2:64:72:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jul 27 15:00:13 2025 GMT
Not After : Jul 28 15:00:13 2025 GMT
Subject: CN=5d54642f4b94ad7cba93b204e4edfc65313e1ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:79:10:9d:33:a1:02:f4:28:8f:11:b7:3d:
c3:bf:ee:5e:0f:20:91:31:69:1c:2b:19:84:93:fb:
9b:5e:4a:60:46:d4:07:fd:91:01:61:0e:83:0f:c5:
44:47:81:e1:07:34:ef:8a:35:d4:5e:f6:85:a1:2c:
c0:41:b3:8d:59:e8:72:d4:3f:8a:0e:7b:44:91:f3:
93:17:7b:50:a3:22:d5:96:fd:ad:a4:fd:7c:4a:ff:
11:15:71:82:34:97:f8:49:30:4d:e9:81:91:3a:a6:
83:5b:69:c8:86:1f:32:a0:78:52:1e:cb:7d:18:3a:
51:13:d3:9c:40:68:45:84:5f:1c:e0:73:6b:b9:ae:
49:d2:87:4b:1b:92:88:a4:9c:e5:f6:3d:47:1c:5c:
41:e1:90:ac:cc:e3:b3:79:5f:68:49:9c:17:95:89:
50:cb:63:45:d5:e1:8d:59:a3:da:80:d7:4d:33:a1:
65:40:e0:a2:c0:4b:f1:3d:c7:13:65:d0:7c:9b:78:
a6:d3:9b:3a:5a:22:e3:cd:96:70:4f:7b:5a:bc:ee:
c2:8a:56:1c:80:e4:a6:e6:85:56:51:cf:fe:d3:cf:
b0:1b:27:a1:2c:4a:1c:b6:02:51:7e:bd:fc:42:ad:
bf:ea:73:4d:d6:ea:c8:a8:4e:c8:72:2a:6d:99:62:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:64:2F:4B:94:AD:7C:BA:93:B2:04:E4:ED:FC:65:31:3E:1E:D9
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:3b:d4:8c:7a:5c:1b:a2:1a:35:f2:83:b6:48:04:f7:00:
7a:ae:5b:24:8a:0c:33:56:11:13:af:31:29:08:54:7e:e2:8b:
96:f2:10:e5:91:be:a2:63:9b:f0:d9:e4:55:09:92:62:23:a0:
c5:22:dc:5d:b6:8b:97:e4:30:a0:ec:5b:0e:7b:6c:7f:28:60:
39:7b:45:a7:8e:20:b1:7d:1a:ad:6c:10:93:14:3c:7f:29:06:
49:ab:79:8b:3a:86:01:28:c3:3b:3c:e3:05:c7:bc:62:91:d1:
0b:26:92:87:1f:9d:ad:cf:96:3c:33:4b:84:8b:44:6f:9a:4c:
a3:be:55:da:bf:10:29:91:89:e9:47:bf:c5:3d:31:25:92:7f:
39:24:be:f5:e0:d5:c8:f9:80:0a:d0:67:db:de:87:58:00:9a:
71:13:c9:bb:68:1e:67:75:f4:33:10:b1:44:c8:83:0b:bf:ba:
4b:2e:4b:9b:93:39:a9:eb:13:34:68:a7:1f:2d:e7:12:6b:39:
95:f4:34:6e:ac:06:7b:53:c0:99:d6:47:92:cf:1d:ff:bf:18:
07:cb:3b:40:6f:f3:8f:ee:df:2d:2b:d0:b3:20:16:be:e3:10:
e9:39:62:75:65:c6:fb:f5:a9:c7:8e:ed:a2:34:0c:b6:22:45:
d7:86:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:45:54 2025 by rpki-client