Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: oQmAQ0L8Q7C+XLlROiGlBf9pAX0R4oYnySx73O3dCW0=
Subject key identifier: 44:8A:36:B1:80:F6:A8:2C:84:47:5A:28:A3:4D:62:15:20:66:4E:27
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 0198530D0C4BBD288EE73A335D0098F8FDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 22:00:20 +0000
Manifest this update: Mon 28 Jul 2025 22:00:20 +0000
Manifest next update: Tue 29 Jul 2025 22:00:20 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: DlZI1gFwcTtDgmzVBFO2cgN1jbB2RHUXqKAOz8LeJws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:0c:4b:bd:28:8e:e7:3a:33:5d:00:98:f8:fd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jul 28 22:00:20 2025 GMT
Not After : Jul 29 22:00:20 2025 GMT
Subject: CN=448a36b180f6a82c84475a28a34d621520664e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:42:ea:c2:09:0c:26:b6:bb:19:55:b9:a1:
de:00:d0:81:54:6c:02:e0:17:ce:ef:cd:1e:3c:a4:
ba:64:e6:02:12:20:6f:d3:9a:d0:ce:1a:43:ca:aa:
09:f4:f5:d2:07:6b:1b:37:d6:ef:0d:cc:5d:77:fd:
d9:0e:7f:92:2a:ea:ea:93:db:cb:0c:fe:f0:7b:d7:
ab:21:a5:dd:a7:a2:c2:9b:8a:b3:a1:99:84:59:d5:
ef:63:dc:6b:40:d8:da:05:a4:7d:d4:06:dd:0a:90:
ed:a2:3b:12:9c:96:ad:cc:b6:b4:a4:1a:12:e0:07:
d5:b5:53:09:9f:e8:17:10:86:be:c3:71:de:3b:a3:
55:5a:36:24:e9:ab:7f:3a:3b:00:73:c7:e7:ff:4b:
ee:43:bc:b0:16:5c:2e:df:4e:34:9a:13:f3:fc:3b:
ea:94:7c:9d:1d:f2:bb:7c:54:23:e5:69:80:40:cf:
28:0c:b2:ab:2f:59:2d:ca:46:8b:a7:37:ad:50:bb:
f2:a0:76:0a:0e:e5:a0:02:d7:82:41:84:ca:cd:f1:
2e:5c:e6:90:87:ee:9c:0f:ac:a7:50:7e:b3:49:c3:
3e:60:b0:8d:17:a9:4b:62:d0:b8:a5:3a:b8:de:1e:
3c:e2:15:c4:c0:86:c6:1d:bf:73:23:34:d4:fb:77:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:36:B1:80:F6:A8:2C:84:47:5A:28:A3:4D:62:15:20:66:4E:27
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:52:c5:e9:a3:55:6e:bd:2d:ac:92:27:6a:24:f7:7f:99:
cc:1e:09:98:d3:11:d4:8d:90:2b:ab:a2:4c:c3:5a:f9:75:c3:
b5:d2:fd:08:7b:73:da:d7:2e:6b:c1:f2:b1:5b:4a:c3:34:7e:
b6:29:ce:f2:62:a4:5b:03:62:74:3f:e1:74:e2:77:1d:fc:fb:
5e:64:42:bf:0a:1b:c5:4a:95:ef:78:0e:f3:9a:1f:5d:ea:d2:
82:ea:a7:48:6f:17:9b:f5:b4:be:b9:5e:8c:d6:a5:62:84:ab:
7a:49:5e:11:e6:75:63:91:ba:cd:c1:0e:20:8b:ed:73:5a:a6:
1f:00:25:26:70:06:ff:91:1f:e4:1a:54:bf:49:79:fd:7e:ea:
f1:d3:0a:c9:f8:4b:60:e1:9f:bf:7f:a6:d1:ea:c6:88:0f:44:
19:d0:ed:94:87:3d:bc:a9:a2:d2:dd:7a:d3:93:a5:be:cc:3e:
84:21:f4:e0:c1:24:5e:88:b4:73:73:d8:9e:13:c2:20:8d:86:
05:53:d4:00:2e:6d:09:ad:3c:11:cd:84:a1:57:5f:7c:90:ca:
08:18:78:1e:f2:4d:c3:03:28:2a:a1:c4:5c:63:ea:51:97:bd:
df:33:ac:fe:4e:22:13:0e:39:9f:b1:37:f1:91:00:ce:3c:a0:
8a:91:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:42:30 2025 by rpki-client