Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: anCVBHpnPfrnXkuXX0dCqyXQR4oSMUetOFtdVgGjRKY=
Subject key identifier: BD:FD:19:B6:78:B0:44:0A:0D:B3:A4:8A:58:F1:C0:59:39:0E:A5:BD
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 01984A09FACF2C81C7E5916F36632EFD1535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0639
Signing time: Sun 27 Jul 2025 04:00:24 +0000
Manifest this update: Sun 27 Jul 2025 04:00:24 +0000
Manifest next update: Mon 28 Jul 2025 04:00:24 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: 2yg/PBglQKKE52Zc6xqFC/tXjKnjZzRWQJiyo2LRUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:fa:cf:2c:81:c7:e5:91:6f:36:63:2e:fd:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jul 27 04:00:24 2025 GMT
Not After : Jul 28 04:00:24 2025 GMT
Subject: CN=bdfd19b678b0440a0db3a48a58f1c059390ea5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:85:e4:5d:c2:1f:fc:d3:d1:ae:72:9e:1a:
61:e2:b6:96:e6:f1:d3:68:a7:26:cf:08:dd:2b:fe:
c8:95:55:b3:1e:1f:1f:5e:08:4d:90:3d:e2:0b:eb:
36:1b:46:12:17:c1:5f:b4:ca:a2:a1:fd:a5:d3:da:
6d:8d:6c:33:ac:8f:83:18:a3:7f:0a:e0:37:91:1a:
71:37:06:c6:b0:c0:d1:52:03:03:03:28:f7:e3:d2:
e8:c4:e4:3c:0e:eb:ed:a6:97:53:ae:89:63:8e:ce:
e4:69:2d:6d:7b:c4:83:bf:3f:8c:40:85:4f:48:c7:
92:3a:32:6f:66:d2:ce:27:52:43:7b:5b:b5:a2:0e:
0e:b6:34:90:86:6f:9a:9f:e3:84:da:a7:ee:26:d1:
30:c5:90:f9:ad:b2:93:0c:05:54:e5:23:14:e0:6e:
eb:07:6b:96:59:5e:db:c7:05:b7:b4:a7:63:7b:31:
36:25:ea:9e:21:2e:2f:06:bd:40:32:64:ca:b3:c8:
a2:e4:88:63:d2:97:f9:20:f6:10:f2:3c:62:bb:ba:
17:12:0c:d0:6b:8c:79:89:3e:1c:28:b1:e6:f3:dd:
45:91:44:a2:3c:a1:9e:b8:d0:2f:8a:f1:65:cf:65:
51:ee:72:a3:68:67:bb:97:4d:5b:a6:b7:ef:da:4b:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:19:B6:78:B0:44:0A:0D:B3:A4:8A:58:F1:C0:59:39:0E:A5:BD
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b6:f8:4a:c9:6b:eb:d0:de:b5:6f:d9:22:a4:c6:85:e8:8c:
ef:cd:99:8d:95:b0:77:f3:de:4e:d0:cb:ce:4a:3e:27:7b:05:
6c:87:d2:7c:7b:45:df:70:14:87:9a:df:39:d5:c7:08:39:f4:
01:1c:7c:5d:68:38:95:15:21:f9:05:72:05:cc:c3:2f:84:42:
49:5e:aa:ff:75:72:5f:37:8f:f7:e7:fe:ad:8c:41:2d:32:be:
fe:4c:02:69:e7:72:32:70:eb:64:fa:e8:6d:a3:4d:c1:d3:8d:
48:f6:c8:8c:d8:ea:ea:00:21:1a:b3:af:b4:2c:90:b0:c3:c3:
7a:bd:4d:35:6d:81:d5:af:05:41:39:85:d3:64:50:26:fc:f5:
69:e9:ba:9f:66:72:af:c0:5e:45:fd:58:ff:cf:b9:38:83:c0:
88:8a:dc:b1:21:a4:ed:eb:1e:df:d4:c0:43:31:2a:4b:d7:95:
ed:7d:8d:9e:2c:6c:69:04:86:3a:25:c8:0f:31:76:ed:1a:15:
89:5f:47:76:a6:dc:ab:7a:8b:a5:4e:0b:1a:66:7b:67:c3:42:
67:66:15:85:08:80:35:9f:5b:c2:5b:a3:24:2b:81:f7:6a:8a:
2b:47:13:e7:16:67:39:3f:47:1c:1d:f5:48:ba:f9:a0:51:f3:
42:dc:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:42 2025 by rpki-client