
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: LjXD+nrqvHYMfHE8/xeOhIVKwpFEOZeqBnpD+sZzNQI=
Subject key identifier: 1B:85:16:D8:39:FF:1E:1D:C0:F3:EE:68:AC:B8:56:0A:2F:F1:25:C3
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 01984A783792944B65D95554F7916D715B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 06:00:49 +0000
Manifest this update: Sun 27 Jul 2025 06:00:49 +0000
Manifest next update: Mon 28 Jul 2025 06:00:49 +0000
Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: qtXcKHR7WPHiKh3WAwr8Rs/qmbTZFRt2UGJOaNHioms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:37:92:94:4b:65:d9:55:54:f7:91:6d:71:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Jul 27 06:00:49 2025 GMT
Not After : Jul 28 06:00:49 2025 GMT
Subject: CN=1b8516d839ff1e1dc0f3ee68acb8560a2ff125c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:0e:e9:99:f1:9a:27:66:24:f7:de:df:3e:
3d:15:ae:c1:12:af:b5:f8:62:b3:de:d4:9e:85:9c:
89:b2:c0:25:7f:0a:9e:2a:e1:c1:e1:30:23:78:64:
c2:36:d4:80:c7:f0:b6:48:85:73:d3:c8:c1:88:cd:
7a:8a:55:7a:68:35:c9:8e:82:6b:5d:46:ab:c3:23:
7a:01:58:c6:68:71:27:f8:34:dc:82:a0:85:01:af:
43:8f:90:8b:5b:97:a9:4a:b0:9d:51:a9:aa:f7:7e:
d1:de:7b:08:26:fe:15:af:51:bd:60:3f:07:c4:01:
fb:ef:8b:06:90:70:32:0b:93:fc:a1:f4:a4:85:26:
fa:46:74:c7:75:15:d9:eb:39:12:fa:11:3d:5a:c4:
41:9b:37:f5:4f:9d:ba:c8:c2:ba:d8:5c:09:c3:cb:
da:7a:27:a7:7c:aa:71:79:4f:90:59:09:90:ee:63:
83:a5:db:15:66:76:d8:df:31:2a:61:91:c9:96:1b:
f0:a1:67:fd:38:23:8d:15:ec:bc:a5:42:d4:35:43:
d6:70:24:ba:f3:a3:26:cc:42:6c:33:48:c6:71:90:
4d:80:81:6d:71:79:b4:a2:e4:fd:d3:b3:c0:ee:95:
26:ee:9f:67:32:1b:35:01:34:fe:64:93:e4:15:6e:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:16:D8:39:FF:1E:1D:C0:F3:EE:68:AC:B8:56:0A:2F:F1:25:C3
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:0d:5d:57:df:6f:27:f7:69:24:9f:8e:60:dc:2f:28:34:
db:22:30:74:10:9e:9d:6d:c7:58:e4:ee:2d:fa:de:19:3e:16:
a8:dd:d6:45:e7:85:00:3d:c5:47:fe:1c:33:57:84:44:b7:a6:
4c:1f:3d:63:c3:77:54:ee:ca:25:e2:0c:48:a7:71:92:a1:9d:
a2:c2:57:12:a1:22:4a:5e:a5:f9:08:f6:76:07:2b:90:79:2d:
25:5d:21:c6:54:41:c6:a2:8f:8b:46:37:82:be:a3:a7:09:bd:
ba:58:81:bc:26:8c:a1:5d:3c:65:78:46:6e:06:17:11:f4:0b:
16:a0:f4:96:93:16:66:fb:00:88:5b:bd:63:2c:64:21:d4:ed:
d5:a1:0a:41:cd:aa:99:28:e2:e7:e4:ca:57:d6:21:1c:bb:1c:
f0:d6:ac:89:84:b1:97:f4:08:0f:6b:dd:e0:53:c0:6d:11:4f:
5a:ce:ef:02:95:8e:5a:01:ff:19:56:f9:17:ae:d6:5c:db:af:
3e:7a:65:29:54:3f:81:00:74:94:93:63:f0:18:95:5e:ac:81:
e4:74:0d:9f:0a:c9:fa:6d:b6:cb:59:a2:50:27:16:25:a6:f5:
8e:0d:05:9d:04:b2:bb:47:5b:d4:c4:ed:88:44:84:6a:10:a1:
26:dc:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:57 2025 by rpki-client