Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: K5CrMl5DoaRa/JtTFLgl75Yn9xg+upjzvihyqck1yow=
Subject key identifier: 73:E4:76:CD:4E:80:D8:21:C3:33:2F:1C:79:0F:74:68:D5:7A:54:82
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 01984776AD83EF3C17FFE02F9C044F70B0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 1253
Signing time: Sat 26 Jul 2025 16:00:16 +0000
Manifest this update: Sat 26 Jul 2025 16:00:16 +0000
Manifest next update: Sun 27 Jul 2025 16:00:16 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: bxUUFRaHspM6kIyND3D2gmtdJ3DOaKELMTpMw8BOPZU=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ad:83:ef:3c:17:ff:e0:2f:9c:04:4f:70:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jul 26 16:00:16 2025 GMT
Not After : Jul 27 16:00:16 2025 GMT
Subject: CN=73e476cd4e80d821c3332f1c790f7468d57a5482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:e5:80:83:48:ac:13:6e:7a:b4:86:cf:32:
88:dd:43:17:ff:aa:09:f4:1e:e5:40:be:20:98:36:
8b:d0:0a:a7:27:1e:c5:a1:fb:ad:54:d4:47:1c:37:
94:9d:df:7e:9d:96:a8:80:09:ee:dc:95:e7:0b:e4:
36:b5:6e:0a:29:1c:d1:a9:d6:7f:58:1f:c8:e8:50:
67:2c:c4:64:4c:a9:b8:a7:c8:d2:8b:0f:38:b5:0b:
f3:f1:f4:0d:06:ef:10:7b:18:bc:56:f6:a0:37:cb:
7d:1c:d7:de:e0:2f:49:18:e5:7b:9c:b9:67:bd:65:
2f:e5:f5:dc:f8:03:54:7f:2d:05:3d:9f:4a:75:9c:
07:6e:f2:e9:c1:29:36:57:13:bc:da:63:99:95:e7:
6c:5c:20:c8:b5:2b:ac:00:87:0e:ce:cb:cd:e5:4b:
90:fa:8d:d2:80:6a:1a:3c:b6:c0:b5:4e:8a:98:04:
07:39:1e:b0:81:04:84:6b:9f:15:cb:37:ab:34:3e:
78:03:4c:72:f5:15:38:e8:d2:aa:97:67:a5:57:fe:
0e:ec:d3:be:b4:ad:27:17:9c:c4:5d:94:9e:fc:3b:
71:0f:29:2f:ee:88:9a:c1:9b:fe:e8:f3:fd:67:7f:
d9:5e:5d:5c:31:79:4b:2f:6c:aa:26:64:da:02:48:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:76:CD:4E:80:D8:21:C3:33:2F:1C:79:0F:74:68:D5:7A:54:82
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:db:c5:ad:00:6f:cf:d2:f0:1f:68:94:8a:5e:49:05:8d:
a5:ca:b5:34:79:71:9c:8a:46:1a:4d:fd:d6:f2:e3:d9:e5:ba:
ae:cd:f5:fa:87:32:2b:36:bd:69:75:5b:61:c4:ae:29:40:d3:
df:7c:3d:a8:23:35:04:59:a6:c1:ac:7c:6e:a0:2e:30:91:ff:
de:12:14:29:39:20:05:79:11:71:0f:ee:51:26:cd:2d:c7:a7:
f2:d0:cf:66:c7:f5:29:75:9c:e7:51:9b:5e:c3:a1:6a:89:cc:
96:46:e5:71:82:5e:2d:f5:16:82:ae:f3:84:35:36:52:8e:76:
56:ac:6d:37:1b:e6:05:42:9e:d9:ec:39:6c:0d:e4:33:90:98:
fb:7d:d7:54:a5:5e:98:ca:e2:ae:0d:38:d3:04:f1:7c:81:03:
0b:5a:2f:3b:73:ed:f3:d3:55:56:87:a4:e0:09:26:26:c8:9b:
7c:46:c4:c9:30:80:0b:28:e5:d5:1d:db:8d:df:a8:bf:a9:e9:
2d:34:ee:f0:84:e4:94:c5:95:f3:30:d1:eb:b2:eb:03:2b:43:
48:5c:5f:bd:ec:d5:db:34:ab:07:c1:2f:ab:2e:3b:a5:f3:c2:
24:e4:de:3f:dd:1f:ed:e9:e0:e4:88:26:c4:53:cd:ca:e8:bf:
74:ae:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:04:05 2025 by rpki-client