Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: 9mtYX6F9ePhBX6kUeVygtN3A+Sqq7wLCmmQrnW7G2Mw=
Subject key identifier: 15:0A:03:4D:D3:B4:A1:0A:0B:65:4E:24:2B:B0:98:43:D5:EB:85:FE
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 01984F31FACFDADCEC79ACD550C18EF491B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 134A
Signing time: Mon 28 Jul 2025 04:02:12 +0000
Manifest this update: Mon 28 Jul 2025 04:02:12 +0000
Manifest next update: Tue 29 Jul 2025 04:02:12 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: /2d5bL/8NcyZ3sADR20n/dAjdSj0vTxLf/nnalwd1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:fa:cf:da:dc:ec:79:ac:d5:50:c1:8e:f4:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jul 28 04:02:12 2025 GMT
Not After : Jul 29 04:02:12 2025 GMT
Subject: CN=150a034dd3b4a10a0b654e242bb09843d5eb85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:b8:4a:d8:62:25:82:33:d8:ba:8e:0b:34:
c3:3e:02:c4:dc:6c:f5:0a:f1:b6:6f:1d:0e:62:0a:
81:e8:6f:8f:5d:f0:a5:3f:bd:56:1f:cd:61:f8:a5:
96:6f:fc:d5:8f:5a:19:e6:e9:42:45:50:0c:5b:6e:
68:df:fc:f9:fe:9d:04:10:c1:91:f4:40:0b:31:d8:
c0:5f:7f:ac:4c:a9:32:9f:dd:b3:f0:9d:19:44:5c:
13:75:86:5f:57:d2:a9:f5:aa:d6:ab:29:be:71:b8:
da:8c:73:2c:aa:11:a2:6f:09:93:bd:d8:6b:1a:dc:
e0:6b:86:ba:2a:93:a8:c8:86:51:f6:0d:52:18:c6:
a1:cf:b8:db:dc:c9:01:41:ff:52:5c:f3:bf:41:24:
ea:df:3e:dc:a1:7a:23:ae:7b:c4:14:91:a0:e3:18:
f0:50:8e:9a:7d:69:c9:1a:cf:17:3a:33:a4:bf:16:
25:4e:83:81:bd:9c:08:a4:9d:6e:c2:64:7d:c8:86:
d9:06:1c:68:41:33:ec:62:f3:41:10:2b:13:03:e2:
e4:c1:4f:b8:70:17:b8:65:6b:54:7c:8d:0c:61:31:
bd:2c:3f:14:00:2a:e8:e0:46:c0:f5:38:8c:cf:e9:
49:f2:b5:e0:e6:80:49:68:b9:c9:23:c6:bf:d8:08:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:03:4D:D3:B4:A1:0A:0B:65:4E:24:2B:B0:98:43:D5:EB:85:FE
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:59:e0:8e:b3:51:80:4f:d2:9e:65:0d:73:00:07:0a:55:
f5:cb:3e:cf:8f:fe:88:d3:9d:ab:d9:31:08:eb:3c:c7:55:bd:
53:e4:b5:5c:01:36:bf:d2:33:eb:95:33:bd:eb:b8:44:53:94:
1b:c4:1d:6d:3c:82:41:99:f0:53:33:a2:5e:0b:d2:c2:99:a7:
c0:11:ec:16:cd:45:91:1c:cb:c2:81:04:88:91:7d:76:8d:16:
8b:76:de:26:72:2c:6e:72:33:44:8c:95:5c:be:29:03:63:03:
26:43:c7:c2:b0:f2:5a:bf:db:65:29:6e:dc:f8:fd:42:f6:0d:
ea:4f:01:cc:37:61:27:d0:78:cb:2c:63:b2:8d:22:45:20:c1:
47:b6:b6:ed:a4:99:9a:6a:5a:c6:05:21:15:3f:ec:3a:01:df:
42:f6:55:72:0d:ac:73:d3:5f:52:43:43:44:b2:5f:6f:e4:3f:
16:7f:6e:83:2d:e3:15:ee:08:31:97:18:81:4c:4d:3f:9a:67:
72:f7:d7:44:5f:9a:c0:61:7e:90:c8:cb:f1:c9:3b:f6:69:d8:
d5:54:b1:d9:f0:0e:01:86:e5:50:c0:31:8d:4d:90:dc:8f:6b:
ac:58:ee:86:7b:c7:7f:87:e3:53:4f:f5:73:74:8a:c9:30:95:
00:aa:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:56:02 2025 by rpki-client