Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: U7H+pKnaW/lfkTE1D6PuTwf6I23CR96dvbREcZ8PsCY=
Subject key identifier: 19:78:BE:1C:DC:45:F2:2A:9B:A6:AB:22:76:57:D3:E3:52:DE:F2:D8
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 01984B53E0875CC8D385A49EF04EE2069024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 0CEC
Signing time: Sun 27 Jul 2025 10:00:44 +0000
Manifest this update: Sun 27 Jul 2025 10:00:44 +0000
Manifest next update: Mon 28 Jul 2025 10:00:44 +0000
Files and hashes: 1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: 4pTk1Jlv1L1fz85oKup4La+5yPoYtw4zBmnM43DwtvU=)
2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:e0:87:5c:c8:d3:85:a4:9e:f0:4e:e2:06:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Jul 27 10:00:44 2025 GMT
Not After : Jul 28 10:00:44 2025 GMT
Subject: CN=1978be1cdc45f22a9ba6ab227657d3e352def2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:56:57:d6:3c:a8:1c:b5:c6:25:95:1c:cc:
19:4b:ec:e8:e9:8a:6b:e7:f8:7b:34:61:f3:7d:59:
8a:28:60:e6:b0:e4:35:f3:1b:85:90:53:89:cb:02:
6a:67:81:b7:c3:a8:5c:98:a2:4a:81:91:d8:cf:67:
de:30:d5:46:a3:73:72:f1:88:40:93:6b:30:ce:de:
90:89:fc:df:9b:50:17:54:8d:bd:6a:d2:34:38:ee:
19:91:be:18:ef:c9:fc:b2:d9:27:28:4c:34:35:30:
97:c9:56:63:35:db:b4:47:58:69:49:c1:79:45:e5:
a1:2d:fa:39:c8:57:b6:05:8f:c3:cc:ca:4c:93:a6:
43:6b:67:48:4e:33:b7:66:07:e4:24:30:2e:ea:24:
66:bb:30:16:ca:ce:04:6a:89:07:c0:0b:36:57:c0:
8d:02:de:e4:fb:b5:90:01:39:22:08:99:c2:79:9c:
92:fc:16:a7:93:36:9a:f0:2b:ec:ce:fc:c2:45:de:
a5:5c:49:5f:0f:e1:b8:01:59:fd:48:21:85:39:6b:
f7:69:dd:76:db:0c:1c:4e:23:36:bd:ef:90:87:b7:
d4:67:01:2a:58:51:87:8c:00:7d:a8:0e:e8:11:29:
4b:c2:c3:fa:0c:8c:46:4d:1c:66:0b:d1:08:16:ab:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:BE:1C:DC:45:F2:2A:9B:A6:AB:22:76:57:D3:E3:52:DE:F2:D8
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:8a:55:e6:07:3c:63:50:81:f0:14:ec:34:85:49:70:e2:
90:14:94:d3:1e:3b:d9:a1:04:42:df:57:28:5d:bb:5f:4c:ec:
07:a0:16:35:50:b4:0d:be:f6:a1:f3:f9:27:24:45:11:f8:b2:
08:b4:ad:f5:5f:01:56:36:2b:d6:2c:b6:a8:b9:85:ed:e9:dd:
a1:17:94:ad:0d:24:a7:5a:38:8b:91:2d:c6:7d:2f:e8:bb:75:
a0:f9:bf:64:80:0b:db:69:9c:e7:53:b1:63:ed:9f:55:40:c3:
05:ef:a7:ee:f4:ae:22:0e:bf:83:7a:27:e6:47:41:6f:21:ec:
e3:a7:89:91:83:ad:45:c8:77:3a:56:a9:d2:12:28:67:78:b8:
e6:3a:c1:a0:4d:f4:0a:f2:4a:81:31:6c:fe:37:5d:50:ec:43:
ba:6c:ee:d0:6e:1b:06:c0:8f:1b:3e:47:4c:d2:e2:17:a5:a8:
2a:42:3d:39:72:3f:7d:ec:99:37:9c:99:d2:97:6f:8a:c5:8e:
e8:1c:a9:b0:8b:e9:e1:13:80:34:bf:84:7f:4e:8c:5c:ee:48:
69:78:df:7e:5d:92:40:30:4a:d3:d1:98:10:d7:ac:7b:05:54:
0c:a8:a4:49:3d:a6:a1:9f:4b:dd:d2:53:3b:91:33:23:04:82:
09:ad:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:16:40 2025 by rpki-client