Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: uP5UPk2AZBt2RhN0G3YzXMvEIvvGANHycI1/HSUmoBg=
Subject key identifier: 20:F7:E6:46:E1:34:65:68:EC:5E:0B:22:9E:AC:4D:50:00:86:3D:B2
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0198469B50918B76FAB17909215284AD855D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 12:00:40 +0000
Manifest this update: Sat 26 Jul 2025 12:00:40 +0000
Manifest next update: Sun 27 Jul 2025 12:00:40 +0000
Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: Qyyz8ZMrszeYH7PtuwqCMFDJzIB0v2NWoDvrQYIC/Lk=)
6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:50:91:8b:76:fa:b1:79:09:21:52:84:ad:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jul 26 12:00:40 2025 GMT
Not After : Jul 27 12:00:40 2025 GMT
Subject: CN=20f7e646e1346568ec5e0b229eac4d5000863db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:31:26:4b:72:12:e7:45:48:a1:64:aa:21:
1f:41:f5:a9:65:9e:2d:b8:dd:fc:c3:4c:59:01:52:
95:1a:7b:64:40:05:bc:2b:5e:ff:5d:ba:9c:0b:0a:
4e:69:1e:5a:30:f4:ee:d5:da:3a:47:14:6a:15:99:
16:4a:79:92:7d:48:a9:d5:1d:4f:df:91:31:03:12:
c5:8d:cf:77:20:82:aa:1c:da:89:19:4c:5d:34:67:
6a:f3:87:62:1b:d8:3f:b7:3b:c9:4d:e5:22:c7:50:
77:bd:01:a8:79:9e:a2:38:97:31:2f:07:d7:ca:c0:
df:a6:c8:05:04:74:0f:ce:d6:84:75:38:4f:07:9f:
6b:9b:2f:b7:82:12:68:3f:a4:1e:73:eb:0e:01:d1:
8f:9b:18:79:ea:17:5b:d8:fd:89:42:cc:8a:ce:e6:
f6:d0:88:bf:ed:6f:86:e2:bf:1a:b4:d9:71:b0:ef:
fe:87:50:0a:df:07:d0:84:24:82:d0:c0:d0:c2:06:
bf:5e:e8:f5:62:4d:93:58:d1:16:2e:64:6d:c5:2b:
b1:fb:90:07:e6:12:8f:b3:c7:d1:b9:ee:35:f2:59:
32:19:eb:e6:79:f3:a2:4c:04:27:cd:b8:2d:30:c8:
1c:d9:06:64:6b:df:e3:d2:06:a5:66:33:8b:69:49:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:E6:46:E1:34:65:68:EC:5E:0B:22:9E:AC:4D:50:00:86:3D:B2
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:e5:33:ae:e6:41:83:ec:bc:99:b1:22:8b:99:60:fc:e3:
1a:aa:06:05:a3:86:3e:36:61:1e:ce:fe:9c:a2:8c:67:45:ed:
14:ab:15:7e:31:ec:c1:72:2e:44:11:83:37:d9:03:11:a9:63:
cd:a9:4d:31:e6:16:a1:3d:43:0b:84:0f:3a:67:32:c7:7f:05:
22:b9:ff:f5:2b:8b:a8:f3:5a:d4:52:d8:65:22:5e:5c:f1:c2:
cc:ed:26:51:07:92:2a:67:6b:2e:62:ce:2d:8a:88:19:bf:fe:
e0:10:81:ac:76:03:6c:c8:43:1f:78:6e:73:9d:8e:2d:a0:f2:
77:69:10:57:88:8e:10:15:f0:ca:cc:e8:1c:1d:11:2d:5d:6e:
02:88:3b:61:ea:50:61:53:d0:6f:5d:9b:4e:e3:f7:02:85:02:
29:06:48:65:58:ed:5f:e7:a7:fc:2b:58:49:99:ec:41:e5:ae:
c6:d1:20:8d:7f:4c:54:73:40:d6:41:1d:6b:69:38:5b:6a:62:
44:a2:d7:aa:79:a0:e9:4f:74:5c:0a:5e:b7:3f:4c:28:dc:49:
f9:e3:dd:1a:08:3d:80:7d:b5:d5:54:5e:30:49:18:b6:1c:09:
99:dc:ff:94:02:3f:14:55:d8:a4:8f:14:1b:df:7b:0e:6a:f1:
47:53:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:16 2025 by rpki-client