Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: pkL1TwQcm4SXYCQqrG5+VBdNJ7ReKcgR+un4IE5fP+g=
Subject key identifier: EA:43:CE:9F:B1:35:91:05:AF:EB:2A:9F:3F:58:8D:02:27:70:31:0C
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01984A413467429A0694E4807757D63119FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 05:00:43 +0000
Manifest this update: Sun 27 Jul 2025 05:00:43 +0000
Manifest next update: Mon 28 Jul 2025 05:00:43 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: Mw6TLZQAV4VynUdlkMoyQ3o9EOVl40eD5TMTriNXw3c=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
8: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:34:67:42:9a:06:94:e4:80:77:57:d6:31:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jul 27 05:00:43 2025 GMT
Not After : Jul 28 05:00:43 2025 GMT
Subject: CN=ea43ce9fb1359105afeb2a9f3f588d022770310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:da:74:a0:04:f9:3c:e4:d6:fa:10:c4:ec:
57:a4:7f:8a:96:82:92:c3:fe:f4:7f:42:d6:6b:a7:
53:6e:a0:dd:5a:6e:b1:99:f5:b2:39:60:65:85:2d:
69:7a:a4:d0:88:2d:45:a3:0c:6a:9c:a4:a8:c2:3c:
30:f4:94:9c:52:5e:cd:62:75:71:b9:5a:ae:e5:9a:
7f:bf:89:35:96:50:3a:f8:50:d4:cf:b8:6b:26:2b:
7e:b4:7f:01:7c:c9:f3:ab:7f:55:61:78:6f:58:d3:
6f:80:39:1f:bb:bd:94:a5:55:98:2f:47:98:db:13:
ab:3e:e3:3e:22:4b:a0:46:ff:0b:6f:42:5a:d4:4a:
c7:d1:fb:16:36:43:0d:6c:22:fa:56:e5:c1:3a:1d:
07:87:f0:70:50:f1:d9:d6:10:a1:e5:d4:05:ad:f8:
ba:50:0d:35:02:17:7c:89:cb:10:0b:75:f9:f8:67:
94:56:0d:3c:52:a9:9a:4e:42:f6:16:ef:81:72:44:
2b:98:17:85:67:48:3b:47:74:ed:93:86:1e:91:97:
67:1f:55:9a:3a:8c:0e:fb:34:67:76:34:fe:28:13:
b9:b2:ee:88:ba:c8:3b:0c:ab:06:d8:40:3e:14:be:
28:06:3b:cc:3f:81:fc:92:2c:3f:3f:31:66:d2:af:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:CE:9F:B1:35:91:05:AF:EB:2A:9F:3F:58:8D:02:27:70:31:0C
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:48:4d:a9:01:77:1a:53:64:3b:6a:3e:c7:6f:14:fc:3c:19:
34:1c:e5:4c:19:33:ba:d2:17:0e:45:8e:ea:0f:4b:ac:8d:ea:
59:96:b1:dc:f5:f4:ed:e6:8b:91:c8:09:3d:9a:55:d5:1f:ee:
7e:e3:31:6b:08:62:1c:48:19:05:b8:97:3a:d0:e6:67:76:5f:
be:ad:36:80:59:29:b4:e7:28:b4:16:18:33:09:7c:ab:ef:ad:
a8:f8:03:ac:19:0b:cc:d3:f5:f0:56:57:c4:99:f6:ad:b3:48:
77:d8:61:7c:6a:3c:9e:3e:66:db:73:83:04:e3:cc:b8:ca:f5:
02:3c:dd:df:98:a1:50:35:b4:a0:e7:92:94:d4:1c:b1:e8:68:
90:6d:47:44:26:50:80:a0:b4:b0:b3:89:fa:b8:48:50:0e:a7:
e4:a8:d7:6e:b0:80:b2:d4:39:d7:10:5b:97:0b:22:d3:54:11:
c6:8f:1f:2c:7c:b3:f4:e4:b0:c3:a0:3e:44:cb:84:10:1d:1b:
ab:84:e5:2e:c9:cc:de:f3:b1:b5:2f:e9:c0:e6:81:0d:e8:ea:
90:1d:e1:b2:cd:28:26:5a:eb:14:9d:b0:a5:97:6f:39:2f:09:
0a:bc:2e:b4:2a:c0:14:20:9f:00:92:0a:01:99:34:0a:b9:33:
34:7f:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:51 2025 by rpki-client