Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: SgfVpnyEEQlhTmMby9ceh1YtUFJpbxBR+5sc0e04NK4=
Subject key identifier: 8F:E3:8F:11:13:6A:3B:6A:E6:CB:EC:99:8E:1B:F0:AF:D0:EC:4B:58
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 01984A0A7161068CB681A32BA6724154C3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 04:00:54 +0000
Manifest this update: Sun 27 Jul 2025 04:00:54 +0000
Manifest next update: Mon 28 Jul 2025 04:00:54 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: vhgbwOWXsH3Bx0MvJSZ76PZ5/g2iGGP7JGAxkKsf/qA=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
3: iGABUqcXXN7aOyjtrZCgc7fQPto.roa (hash: GEJ0Of7uNCnr4mLuQTqHOBw0HqR8tQuPsFCRYfeeMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:71:61:06:8c:b6:81:a3:2b:a6:72:41:54:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Jul 27 04:00:54 2025 GMT
Not After : Jul 28 04:00:54 2025 GMT
Subject: CN=8fe38f11136a3b6ae6cbec998e1bf0afd0ec4b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:d5:fc:3d:93:29:9d:18:86:b8:70:03:56:
60:bc:0d:e5:9c:ba:49:de:49:bc:9f:62:62:a2:31:
1e:2e:e9:7d:9a:dc:f0:e8:f6:23:97:e6:c1:ff:0d:
a9:28:d7:f1:0d:35:75:b2:7a:4b:07:49:1d:0b:76:
a9:e5:64:ef:98:2f:44:0d:2b:96:d4:b9:73:58:a5:
35:8c:b0:73:48:b7:b7:fe:66:67:14:45:f7:b2:49:
57:e2:95:d0:33:de:a5:53:62:93:31:ba:73:2a:c5:
ee:3d:e1:34:4d:5f:b3:59:5f:d4:34:2a:35:14:45:
db:72:de:63:be:f4:fd:8f:c4:d9:6f:e5:64:f3:d4:
6e:5c:7d:48:0e:4d:d2:cf:44:a0:c4:fe:be:d8:11:
5e:c6:c4:b0:36:69:52:4a:90:da:21:33:3a:ab:2a:
70:66:38:ab:04:2f:ff:9a:11:a1:41:e6:a7:1d:b0:
4f:52:e9:a3:7f:41:ab:48:b5:3a:96:17:10:a2:cf:
d3:c0:ad:e7:ca:85:31:85:42:3a:27:0e:28:4a:e7:
ed:c7:20:7c:3a:3a:9d:ab:96:53:e5:3e:8b:96:2c:
ce:d6:22:cf:41:fb:fc:81:b8:d4:33:37:97:d8:61:
f8:51:03:10:ff:d3:df:2a:10:66:ac:e9:df:18:7d:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:8F:11:13:6A:3B:6A:E6:CB:EC:99:8E:1B:F0:AF:D0:EC:4B:58
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:62:d5:b4:9c:65:4f:11:c0:88:5b:f0:d5:3d:79:ab:c0:5a:
13:99:73:d8:04:a7:a6:66:31:31:c8:69:22:7a:b8:80:3d:5b:
4c:31:da:31:5e:44:d1:07:8a:3a:78:1f:2a:b4:e9:a9:0a:c0:
4d:b2:be:3f:ec:92:89:fa:05:75:d6:1c:70:49:40:43:5e:27:
31:94:29:88:b1:f9:03:0e:80:37:66:c5:bb:53:bb:0d:a4:f4:
51:61:f9:4c:ed:37:43:a2:0e:d9:92:7a:2a:32:7c:e9:2c:23:
a3:0f:88:c4:fe:1c:14:d3:33:7b:c8:34:23:2a:28:ef:88:86:
e1:ba:13:e8:d3:d7:4c:d7:ef:8b:93:9f:de:81:de:fc:9a:0b:
2d:6e:95:52:46:03:ba:0d:6c:45:06:d1:67:39:3f:df:4d:1a:
ce:45:98:28:fc:f4:53:70:8f:34:35:0d:51:b1:46:3f:5e:15:
8f:81:77:70:94:84:e7:71:c3:4b:47:6e:4b:57:48:32:8f:54:
3a:a9:4d:f0:ae:83:ef:f0:df:dd:1e:b4:88:15:34:b8:52:a3:
e4:c4:b9:63:ee:ea:18:b8:83:5e:86:d8:b2:22:09:5c:78:94:
8f:d5:65:5a:e3:3f:81:1f:52:eb:87:3f:c9:c4:0f:44:9a:41:
af:de:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:58 2025 by rpki-client