Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: o1YdO0smJqzm8yAzT+LU61Vj8gR32QSJJagkghtV7/4=
Subject key identifier: 9A:35:D3:61:C8:D7:88:B8:D7:B6:5A:D9:04:88:36:8F:97:84:E4:FD
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 0198439A31DDFF0189C4D275D4D261FD999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 22:00:35 +0000
Manifest this update: Fri 25 Jul 2025 22:00:35 +0000
Manifest next update: Sat 26 Jul 2025 22:00:35 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: qun6bpP4lKEDUgNuE2DGv9WC6Z36meJgQqBJbEpwznI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:31:dd:ff:01:89:c4:d2:75:d4:d2:61:fd:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jul 25 22:00:35 2025 GMT
Not After : Jul 26 22:00:35 2025 GMT
Subject: CN=9a35d361c8d788b8d7b65ad90488368f9784e4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:45:44:22:34:28:e5:a8:49:ba:89:2e:e8:
fd:3a:93:ab:1d:bf:2a:e9:21:8b:b8:ea:46:2a:df:
77:8b:a1:bb:49:a9:79:84:b3:db:f6:13:d6:79:4f:
35:d0:75:48:bf:0c:d2:fc:28:6e:64:5b:76:c9:a7:
b7:fb:7e:ac:f6:77:7f:9c:f3:17:49:bc:72:dd:37:
60:39:67:ad:a8:bf:08:1b:e2:91:4b:a6:6c:db:21:
7e:99:99:20:31:de:5e:e5:c7:14:3a:ba:55:22:8e:
5c:f0:d5:35:81:97:ef:9d:a7:85:03:2f:4e:4b:09:
f0:68:4f:d4:39:da:87:62:46:7d:5a:93:f9:11:a8:
3a:21:e4:9d:26:1e:e9:4b:9b:30:ba:ca:be:b5:79:
58:25:2e:4a:00:b8:dd:f1:a1:a0:77:25:3d:62:cb:
fe:89:64:b3:25:46:70:3b:6f:c4:66:cc:e1:2f:1f:
2f:4d:4e:b7:2d:9e:ba:26:f1:be:d3:6f:01:b8:54:
3c:05:7b:88:6e:30:9f:9f:3c:6e:d3:89:78:3c:ca:
86:f9:3b:11:c4:ae:b1:1f:c8:5a:33:42:9c:41:cf:
d7:46:5d:3b:d7:f6:36:7f:10:d7:5d:c6:0b:fe:1b:
79:05:55:0c:d6:75:da:04:e6:46:38:70:a4:e7:d5:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:D3:61:C8:D7:88:B8:D7:B6:5A:D9:04:88:36:8F:97:84:E4:FD
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:52:d5:b0:1b:e0:56:8c:d1:7c:44:60:91:59:69:79:3e:60:
07:cf:a7:2b:26:53:32:49:83:f2:25:2c:4d:2f:69:ca:aa:3c:
89:67:b0:8d:61:6d:ae:c2:8f:53:18:e4:de:ac:d0:97:11:95:
d3:c8:d8:a6:9b:a2:1f:6e:13:8c:30:1c:57:47:ca:31:28:71:
58:e3:a2:d1:b5:c3:f9:84:eb:2b:16:87:57:d2:89:bc:5b:4e:
b1:66:e7:96:5e:29:1f:23:86:28:d4:00:5f:3f:ad:a2:96:a8:
c7:b8:69:57:94:8b:fa:6a:35:ca:a1:6f:9c:a7:13:e4:8d:b6:
56:48:f5:05:a9:e8:00:11:0d:65:62:0f:4e:65:29:3c:dd:99:
f0:e2:5f:0d:8b:23:2e:4e:9b:78:22:20:73:36:05:a0:c3:45:
26:b8:26:5f:4d:e1:1b:f8:67:02:37:c3:b9:ea:4d:5c:12:fc:
47:82:df:d9:be:9f:9e:e2:98:3f:4d:0e:09:94:b5:3f:48:b8:
9c:8d:5c:51:6d:56:39:72:16:52:50:99:84:c2:9a:29:e6:b7:
7b:55:9f:3b:60:27:29:cf:31:ff:5c:ad:41:03:b4:4b:71:89:
56:32:48:f0:7f:e8:7e:e9:6c:83:f2:b3:7d:80:23:22:e2:0f:
15:68:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:29:30 2025 by rpki-client