Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: naYooJ5alVt8C8nS320DzntWGJ6+lsrJTmjaaziXdLg=
Subject key identifier: CA:74:D7:E3:DC:63:C2:15:48:51:54:8E:D7:8B:9D:28:A2:57:EF:7A
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0198537B0D09ED8E6EAD3C8A9C3DB1E296D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 12AD
Signing time: Tue 29 Jul 2025 00:00:29 +0000
Manifest this update: Tue 29 Jul 2025 00:00:29 +0000
Manifest next update: Wed 30 Jul 2025 00:00:29 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: jQBShlXJP3CKu/i780nbM9g3f/Yg+eCmx0dGj6x78Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:0d:09:ed:8e:6e:ad:3c:8a:9c:3d:b1:e2:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jul 29 00:00:29 2025 GMT
Not After : Jul 30 00:00:29 2025 GMT
Subject: CN=ca74d7e3dc63c2154851548ed78b9d28a257ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:f7:d4:6f:20:b7:9b:86:d4:42:3b:c2:5a:
af:02:6a:80:a9:d3:b1:16:44:1b:97:d4:0b:86:67:
dc:c7:80:56:85:a9:25:5c:09:70:5c:3a:61:3a:d3:
3d:33:55:9f:ec:50:58:6b:e9:fe:05:83:0a:30:69:
4b:bf:02:0c:89:ad:74:d8:5d:8c:59:11:c2:ce:25:
47:ff:b4:76:42:f9:d5:e5:93:9a:14:bf:9b:c3:2b:
f2:5b:4e:54:60:28:fe:28:36:ad:08:98:9a:62:e5:
93:3a:00:d9:ad:77:b3:19:23:00:ea:a4:c8:dc:ce:
3e:db:cc:b5:85:2a:46:6a:00:e7:63:e0:b0:b8:bd:
23:c1:75:68:e8:92:8e:a1:cf:fc:9b:20:10:1f:59:
fe:63:e8:ac:ea:cf:01:57:63:b7:92:ce:ed:62:57:
7d:0f:b7:01:7d:50:7f:6c:24:57:f5:9b:d0:57:f5:
c5:f7:9d:96:9b:a8:13:2f:87:36:04:7a:3a:8e:24:
e0:dc:61:04:b6:13:5f:d0:15:df:a3:f8:da:a7:0d:
0f:64:df:f4:0d:58:cf:fc:6b:c9:89:24:e6:a8:75:
18:ec:a1:6a:de:85:c1:0c:fd:7f:20:7a:0e:54:60:
69:49:8b:93:68:66:c6:1b:17:d6:e0:ce:3d:f3:00:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:D7:E3:DC:63:C2:15:48:51:54:8E:D7:8B:9D:28:A2:57:EF:7A
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:a1:e9:5b:23:fd:f9:54:29:f7:15:34:a1:23:f7:06:b4:
92:43:12:b1:e2:7c:42:ca:96:3e:8d:7a:58:f0:0e:32:ed:3b:
fb:87:1d:71:85:14:63:26:05:6b:44:00:99:91:ba:b2:9d:9e:
b9:a4:79:b1:c1:60:62:92:34:ce:e4:5a:74:37:04:61:aa:70:
75:72:e1:4c:8c:53:37:5b:15:38:1f:ec:a2:52:37:95:49:2c:
cf:0e:80:0c:e5:f1:88:a5:ec:13:c7:a0:48:6f:a8:19:e0:25:
12:39:1e:04:af:4d:52:44:2f:7f:20:5d:ac:b6:8b:66:8e:fc:
e2:6d:82:8c:9d:49:68:88:b2:33:b5:e1:e1:18:87:76:67:8c:
ff:e3:de:a0:f4:51:06:5f:55:75:d4:cd:f4:f9:5e:f2:db:1e:
17:db:e1:cd:8d:d8:b4:58:88:47:0a:fe:58:63:8b:1a:dc:3d:
a5:b2:d9:72:48:d1:fe:7e:2c:dc:dc:42:aa:25:dc:b8:18:10:
5d:52:af:da:61:65:08:49:fc:7c:d8:9f:54:75:20:03:8b:bc:
d7:10:bc:1d:bf:70:f0:c6:71:c2:ec:af:67:cc:23:83:28:d9:
d0:8b:89:75:30:2c:f0:ae:8f:73:52:db:d6:af:f4:fe:cf:9a:
41:c5:38:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:18 2025 by rpki-client