Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: lOhYCnN+5gPjNlkVbTgl0tjnLj2U7RPB+KVtFDZ7H1Q=
Subject key identifier: 6A:5D:BD:0B:C0:4B:D1:09:61:56:97:C0:2F:B5:E2:1A:07:6F:8B:89
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019847E4B5E6FE9DEB0E059F78EC95FBB127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:00:27 +0000
Manifest this update: Sat 26 Jul 2025 18:00:27 +0000
Manifest next update: Sun 27 Jul 2025 18:00:27 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: nKMMDbV/CKyfP7orcSjC9WOPM9GdTJ04Kh4sBU2F6Q8=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:b5:e6:fe:9d:eb:0e:05:9f:78:ec:95:fb:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jul 26 18:00:27 2025 GMT
Not After : Jul 27 18:00:27 2025 GMT
Subject: CN=6a5dbd0bc04bd109615697c02fb5e21a076f8b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:75:85:a5:fb:b0:e0:77:5c:05:78:bb:cd:
c8:19:f2:7e:b5:ff:02:75:0a:1c:93:c5:11:8d:df:
fe:04:5c:d7:5a:9b:48:e4:70:fd:e6:25:b0:75:87:
09:12:4a:9f:c8:e3:58:e0:33:39:9f:00:b5:bb:19:
b8:8c:0b:8b:b6:38:47:24:16:31:4c:f5:9c:bd:0e:
1f:9f:b2:de:dd:93:8b:75:16:b0:31:22:4f:f1:97:
04:c7:96:6a:38:a3:75:16:fa:f1:f7:68:6d:4d:bd:
25:5e:34:6a:6a:1d:2f:5b:93:ea:3e:04:94:aa:33:
45:45:bb:84:31:bd:97:62:85:29:29:d5:d0:69:fa:
9f:6e:1f:82:c4:a9:01:36:ed:80:da:f7:00:dd:f1:
b9:d2:d9:e9:ed:67:81:f4:2d:3c:2e:06:51:10:a4:
67:63:4f:47:5a:1c:bf:29:6c:d6:22:fc:7a:5b:50:
f0:01:c2:14:5b:0f:87:29:8d:d8:02:c7:e2:4c:3d:
b2:c4:f0:b8:16:9e:66:68:0f:de:f1:d9:d3:dc:4a:
aa:bd:4c:09:d2:eb:92:08:fb:5e:d1:d3:a4:e7:8c:
52:53:e8:16:78:9f:b3:7c:c4:64:31:71:0f:b1:26:
d5:9c:56:5c:c6:77:7f:00:83:ef:f8:c2:54:cf:56:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:BD:0B:C0:4B:D1:09:61:56:97:C0:2F:B5:E2:1A:07:6F:8B:89
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d2:e2:32:dc:03:91:b9:cb:9c:da:0c:17:bf:cb:8e:77:3e:
ec:77:bf:6d:ae:45:72:d7:e6:93:85:f6:85:04:54:e3:d4:e8:
26:04:24:d3:c8:a8:94:ea:c2:a4:e5:cc:e4:75:46:a8:aa:e2:
d4:dc:73:97:c7:82:0a:81:6e:dd:2a:ce:c6:2a:f1:6b:8b:d2:
98:58:1c:1d:85:8e:43:6c:f3:7c:b2:d1:15:93:13:3e:ee:af:
5c:2c:fe:1f:a9:c6:40:52:de:95:87:69:6d:90:9f:2e:28:c6:
a7:71:ce:2a:b0:cc:ec:e0:a0:60:fe:a2:76:90:6e:43:a1:bc:
7f:d4:ef:ce:72:a7:42:38:c9:c8:e3:0a:7a:1e:b6:71:60:12:
14:d5:d1:90:7e:4e:5d:92:be:d4:91:2c:18:dd:9b:45:5d:77:
dc:09:a2:89:80:5b:b2:72:6f:13:76:f6:66:28:76:d9:64:d6:
a6:78:5b:88:d6:80:da:29:06:65:b9:1b:b2:f9:a6:f6:aa:30:
94:e0:ed:7a:47:70:d0:dc:34:8a:67:f8:da:f9:ee:97:27:55:
8b:df:1f:5b:78:0e:56:3e:1b:7d:53:ff:61:bc:5d:51:7b:70:
46:2c:6d:59:28:73:6c:44:a6:f2:18:65:f1:08:e9:f6:ba:dc:
6c:4c:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:42:14 2025 by rpki-client