Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: mfZTRO5M4U3XclueOG7E26bLgj1+Gfm3p8P/hyeDRMg=
Subject key identifier: 03:26:AE:CC:98:EF:6A:C6:ED:B7:D7:AC:9E:83:22:3D:1D:43:97:E9
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0198451A801E3942466A8CA9B921AC394F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 0AB0
Signing time: Sat 26 Jul 2025 05:00:21 +0000
Manifest this update: Sat 26 Jul 2025 05:00:21 +0000
Manifest next update: Sun 27 Jul 2025 05:00:21 +0000
Files and hashes: 1: JZK6YSeBc1BbG83Qekl2aATyxHU.roa (hash: Wa+cbSmnDCoci/OWT42YCZ1RtEmxjW8RP6TQupPGRBk=)
2: LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa (hash: hMJW6h+5JE+dal9rkWR3bK6F1BlVNwt7VsR0ZpIQGdQ=)
3: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: aQtstLVNxRKgjkILqwyOzPuZupYF4cZUI0MD9DnczEk=)
4: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:80:1e:39:42:46:6a:8c:a9:b9:21:ac:39:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jul 26 05:00:21 2025 GMT
Not After : Jul 27 05:00:21 2025 GMT
Subject: CN=0326aecc98ef6ac6edb7d7ac9e83223d1d4397e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:73:14:53:c2:a4:40:80:d4:3a:a4:ba:04:
6c:36:37:6f:ff:2c:4d:c1:62:93:a0:54:aa:3a:f6:
89:29:b0:8a:46:3e:f3:48:cb:9f:6b:52:2b:30:f6:
bf:f0:18:83:e1:ee:10:05:63:7d:f9:07:a5:5b:c7:
88:d3:0c:01:3e:f8:40:c7:38:8e:1a:e1:84:37:c8:
01:be:28:da:c3:4d:f8:4b:a8:74:b7:23:3c:f8:59:
5c:a3:1d:77:1c:e9:5b:32:0a:13:49:94:dd:ff:01:
c3:bc:d0:f9:4e:11:d8:f9:b4:7a:a1:8e:39:ec:01:
09:00:7a:fb:1c:61:7b:72:93:3b:8d:e0:b3:c4:fa:
29:43:31:7e:a4:3e:c3:dc:42:d3:a6:dd:6b:77:6c:
45:19:b1:3c:e4:9f:ac:c3:25:ef:1b:92:e8:c1:aa:
06:31:4f:d0:8f:0b:24:17:9f:9a:7b:5c:e7:60:12:
cf:31:9b:ab:59:4f:0c:41:a8:f8:12:2f:9c:5a:d7:
f7:19:03:de:11:ff:8d:7e:70:ef:97:7d:ec:09:20:
88:bc:15:6f:8c:92:5c:51:c4:8a:43:17:74:27:b2:
d3:44:f0:80:92:96:54:7d:ae:bf:25:e2:e2:46:cc:
ce:de:f4:0b:ea:3a:df:64:f8:38:de:0f:1c:af:e5:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:AE:CC:98:EF:6A:C6:ED:B7:D7:AC:9E:83:22:3D:1D:43:97:E9
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:ec:58:f6:d3:e7:b7:f7:dc:b5:82:9a:a6:7c:78:60:68:
1a:d8:38:20:87:a7:07:af:f9:2e:7d:54:2b:a9:a6:1b:be:ae:
45:2e:b1:c2:1d:13:7d:92:88:3f:66:17:93:b0:ac:22:f5:70:
fe:2a:4b:8a:8f:e8:24:34:fb:43:fc:b1:8d:2a:b3:a6:08:29:
91:17:ad:e7:78:43:02:e4:7c:c8:28:e8:e0:29:d6:7a:d9:bd:
fe:25:85:21:04:f6:f4:26:cc:fa:d7:0e:7d:b2:80:34:73:e0:
2e:33:2b:8e:46:8c:c6:ee:67:29:2d:3e:03:d8:66:54:f8:0e:
7e:d8:9b:0f:01:30:f4:03:82:f5:4e:a2:96:26:db:16:c8:f2:
67:71:03:17:9b:40:9c:e1:0f:5d:f0:ee:b0:dd:a4:72:ec:c2:
85:c7:59:6d:24:9e:7d:b1:1a:1f:3b:ac:2c:a2:9b:43:0b:fb:
c7:39:ce:a4:ff:20:d7:89:c0:3d:29:e5:e9:2d:f8:da:70:4b:
56:2a:91:49:8e:00:f6:da:67:be:b9:22:84:32:0c:0f:bb:7e:
5b:24:73:2e:8a:f9:ba:4d:0e:ad:7d:d3:09:a1:a6:83:1a:01:
3d:fc:25:41:12:72:b5:de:5b:ed:d4:8e:1b:a1:f7:00:85:8a:
1f:cf:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:00:19 2025 by rpki-client