Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: S013+7NVy88Ix1PmE+ATi1LnoMYM7qx0Z0gd7qflAzg=
Subject key identifier: 13:9E:D3:7E:0D:28:E1:07:94:80:C9:E1:C5:ED:50:74:FF:CE:4A:58
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019848C0559B883588074468F88D1D78AF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:20 +0000
Manifest this update: Sat 26 Jul 2025 22:00:20 +0000
Manifest next update: Sun 27 Jul 2025 22:00:20 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: tB0DBQV7vFnkw44ButjYaV0Pgl3zU87Y3rVk9Ay1cW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:55:9b:88:35:88:07:44:68:f8:8d:1d:78:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jul 26 22:00:20 2025 GMT
Not After : Jul 27 22:00:20 2025 GMT
Subject: CN=139ed37e0d28e1079480c9e1c5ed5074ffce4a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:b9:c0:08:24:6d:51:b3:e2:7c:54:5b:2d:
2d:6f:24:7c:48:70:68:c7:0f:f6:94:ca:06:5f:20:
2c:30:28:b0:21:5d:ac:ab:fe:d4:46:14:cf:f0:e0:
4c:1d:da:af:1f:8b:04:c1:34:dc:0b:18:71:fb:57:
a4:ab:43:ef:a9:57:32:88:23:04:fd:da:81:95:4a:
dc:84:fb:b6:7a:bc:1b:19:bc:30:17:8b:54:d1:4e:
f8:df:f0:b0:a1:36:b0:c9:ac:c5:e5:dd:5a:27:9d:
7c:d1:a4:cb:95:6c:de:e9:0e:2e:a8:44:a5:96:45:
9c:4d:d8:76:ca:93:6f:ca:90:5a:24:69:63:b2:6f:
f6:94:33:a1:50:5d:2b:81:75:3f:50:f0:3f:b6:fc:
a1:d9:23:6f:35:80:fa:03:4f:55:d3:cc:2e:81:d0:
d8:f8:ee:39:03:36:7f:14:ee:ec:53:43:4f:0a:b0:
76:a0:3e:9b:71:8b:a0:18:61:0f:72:20:e9:e6:5f:
17:65:27:78:65:d1:5f:86:1c:27:da:0c:0d:0b:f7:
da:68:2c:be:48:51:ad:20:31:e3:04:0d:84:e1:da:
18:34:8d:d5:e8:79:da:b4:50:8f:3b:fe:65:4d:ec:
f7:14:f3:65:55:a8:a6:52:29:fe:58:c8:5a:94:50:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:D3:7E:0D:28:E1:07:94:80:C9:E1:C5:ED:50:74:FF:CE:4A:58
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:2c:27:a0:9b:ce:ae:a7:34:51:a2:53:bb:00:60:cb:74:
bc:29:38:08:12:08:c9:ff:5a:c6:9b:10:03:d5:72:6a:8a:d1:
f0:8b:18:af:fc:cd:c7:af:be:f0:c4:0f:f2:10:ad:03:a8:c3:
c1:00:1c:02:c1:af:f1:07:18:c4:ff:f5:a7:99:98:bd:04:cd:
7a:63:de:bb:b7:75:59:bc:26:56:af:9a:06:5f:49:6d:71:c9:
7e:f6:a7:2e:e3:d8:b5:3b:7b:79:53:c4:6e:6e:dc:0b:73:4f:
93:e9:16:f5:57:6e:5c:1b:dc:c0:46:45:92:61:0d:cd:2f:59:
9e:62:00:e1:23:43:d1:4c:a0:a4:32:4c:38:10:19:9e:18:cf:
aa:7c:00:62:c0:ce:18:f4:9c:f5:cc:5b:b5:8a:f6:f7:c0:d6:
d0:0b:b4:1a:d9:ef:ea:53:f6:76:ff:e3:f5:08:c1:83:18:71:
db:ee:6a:e4:0f:4b:1a:46:84:40:af:0f:1a:93:81:6c:18:59:
ec:c9:92:89:92:f6:5a:a0:ae:cd:95:36:c0:3e:b8:ae:c9:ee:
7c:37:cc:ba:bf:b0:87:dc:9b:80:a9:d0:4e:dd:5d:d8:79:64:
3f:bc:bb:78:bc:fe:d4:09:a5:6d:e5:a3:df:40:97:08:07:81:
7d:c6:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:28 2025 by rpki-client