Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: q5kv1CEiORKwYBw2bWVo5CPWu156f4pb0px+MHW9+6I=
Subject key identifier: B0:64:5D:E3:0D:DC:3B:C9:30:65:CC:68:09:43:E0:A9:03:1F:27:C8
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019849658EBB26CDF5E7AAC2E52CEA8C7031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: TVloKWLiaXBhUEX+YbdSOvVFOZ2rJNkPv8gFxTjEUvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:8e:bb:26:cd:f5:e7:aa:c2:e5:2c:ea:8c:70:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=b0645de30ddc3bc93065cc680943e0a9031f27c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:0d:e1:ad:fa:ef:bd:1e:cb:88:41:ad:b6:
07:6c:db:75:cf:62:0f:bc:26:73:16:cb:45:90:aa:
af:7f:e0:61:6b:bb:60:d3:9c:0f:4f:84:59:14:6c:
48:78:a9:76:72:b9:85:b5:c9:fc:3c:55:b2:de:e1:
d1:6e:fc:31:0c:45:88:b2:05:c6:8d:48:51:4f:12:
0a:7c:e9:cf:4b:cb:dd:25:c0:86:71:e3:8c:a7:47:
21:de:40:5c:76:95:21:5f:a0:3a:32:8f:f7:17:c4:
47:65:46:d1:56:ff:74:0a:15:8a:ed:e2:63:1f:39:
6a:02:6c:f6:69:03:c0:87:d4:f2:86:85:bd:d6:78:
34:a4:dd:55:56:e7:c1:92:1e:12:5f:3e:2a:c3:95:
ad:7b:a8:9f:05:88:92:be:a9:db:a4:0b:2d:44:70:
de:f5:d5:b5:f9:24:5a:70:aa:93:86:de:07:40:be:
0a:24:de:b3:9d:b9:84:70:92:dd:27:4f:b9:c1:28:
49:c5:80:2a:df:cb:d0:7c:18:6c:7e:b4:b7:8f:cc:
19:6b:60:c8:5d:f1:89:ad:cc:47:cb:e2:8e:6b:86:
ae:da:5b:e9:5d:ea:7c:3c:04:be:84:23:9a:9c:dc:
7b:02:cb:1b:d7:8a:d7:35:0f:60:54:48:d0:01:87:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:5D:E3:0D:DC:3B:C9:30:65:CC:68:09:43:E0:A9:03:1F:27:C8
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:ef:d8:be:3d:7f:7b:16:86:4e:02:19:32:df:6d:b9:47:
34:e0:df:31:2a:02:b2:fe:3a:ca:a6:9e:80:19:1b:e1:f1:fe:
5e:f4:f4:d3:9a:5c:62:8f:86:92:89:83:a2:30:cd:bf:f4:a1:
7b:aa:12:71:41:06:79:c6:75:76:73:9f:5d:e0:16:7f:8a:58:
56:64:00:f4:da:05:be:36:07:bd:d5:4c:a8:46:8d:55:9b:11:
f3:c2:91:41:f2:09:78:f2:8b:96:03:63:64:5f:0d:a9:05:19:
6e:e3:d1:58:31:54:6b:23:f2:33:6c:66:7f:41:7f:5a:31:19:
71:41:db:d3:51:70:7b:d0:3e:df:79:08:71:6d:de:95:b4:0b:
b0:5c:83:55:f0:0f:8a:68:e1:f5:50:b4:b6:ff:33:28:e6:a7:
e1:02:f0:b1:94:88:fa:10:19:a6:f3:06:c9:b6:63:3c:4c:98:
4e:03:97:f2:73:d8:3c:2a:21:91:0d:24:10:84:fd:b1:cb:f4:
2f:f1:86:c9:e8:c9:6f:41:3e:12:a4:01:e8:96:b3:70:a2:90:
6f:90:fb:45:9c:9c:52:e2:41:f7:20:ed:d0:96:5f:bd:51:d2:
40:02:fa:ce:cb:e9:11:82:43:e7:b9:db:99:28:d9:3d:83:a6:
5e:1a:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:18 2025 by rpki-client