Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: QR0LJckkToEKO8jiae9V/liFPFWqN8h2iZRKUXzcQ6k=
Subject key identifier: 4B:49:C7:EF:BA:94:16:5D:FC:C9:4C:49:87:61:A9:B5:FC:03:B1:AD
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 0198548D81D6E8BC956DDEB2701A127BB570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0670
Signing time: Tue 29 Jul 2025 05:00:16 +0000
Manifest this update: Tue 29 Jul 2025 05:00:16 +0000
Manifest next update: Wed 30 Jul 2025 05:00:16 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: xKMIZu8I58bLnAoGAfxTgq/lllX3IT83wzSWEIBZMjk=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:81:d6:e8:bc:95:6d:de:b2:70:1a:12:7b:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jul 29 05:00:16 2025 GMT
Not After : Jul 30 05:00:16 2025 GMT
Subject: CN=4b49c7efba94165dfcc94c498761a9b5fc03b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:fc:c4:61:d8:9e:5c:da:4d:a0:57:90:6b:
87:f8:47:f9:65:93:72:13:94:47:f2:69:13:35:d7:
dc:40:a3:8f:d9:4c:09:75:50:8e:ae:2b:0b:52:1b:
3f:9b:0b:ef:59:e0:37:a5:cd:3c:94:38:52:58:db:
e1:cc:20:f6:24:83:32:7c:d6:2a:74:23:6d:20:77:
a0:7b:f3:96:d1:64:0e:1e:4d:cc:7b:48:2e:0c:e7:
ac:5e:fd:e8:cf:c6:5b:c3:b1:ac:24:4f:ce:9b:4c:
af:8b:9c:85:54:bb:2d:b2:33:ca:90:b6:62:1d:3d:
6c:b0:96:c4:bc:d2:f0:6e:90:94:46:26:a8:65:7a:
52:90:26:d6:da:0b:07:28:68:d8:6e:34:ce:2e:c4:
a7:70:7b:4e:35:87:8a:af:bf:8a:9b:ff:a8:91:a6:
63:9f:25:3d:8c:86:21:bc:6b:4b:10:4a:cd:95:b5:
3b:b2:d3:7a:fa:b9:ac:2b:c9:e1:bd:68:01:7b:c9:
b4:2c:23:45:bd:23:b3:48:3f:d2:5a:3b:3c:dc:28:
61:40:b7:5d:e2:0f:5b:18:f5:ca:54:3f:21:36:a9:
db:76:72:5b:52:8c:aa:f3:f8:2b:42:36:c0:8e:7a:
b6:72:9a:e7:30:db:6a:9c:90:64:19:17:1e:12:5a:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:C7:EF:BA:94:16:5D:FC:C9:4C:49:87:61:A9:B5:FC:03:B1:AD
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d4:82:98:05:b3:c7:a5:f4:24:22:d6:65:20:2b:1a:90:05:
15:e7:64:46:ca:28:93:77:7f:8c:ec:6a:df:44:fa:ea:3b:b7:
06:84:67:27:9d:e9:6d:b3:2d:b0:3a:e5:a7:05:c1:0a:82:b8:
be:21:4c:1f:89:06:f6:81:f0:38:31:3a:99:43:a6:6e:aa:ef:
72:67:73:20:76:0b:0a:98:e5:dd:a4:d6:35:3a:51:94:eb:27:
63:cd:58:41:c6:24:bc:de:85:8d:ad:e6:5f:2a:3a:75:67:92:
eb:2c:3d:c1:c4:75:a4:3f:3c:f9:cb:70:c6:58:02:15:65:2a:
1b:82:c4:a2:85:2b:03:21:eb:96:24:a5:e4:2d:fe:9d:5b:79:
f2:d1:67:fe:72:dd:35:b6:fa:51:ff:a6:2b:36:23:05:1b:22:
aa:ad:ca:48:f5:70:43:65:15:51:ed:84:9c:33:a8:d3:b4:8d:
4d:5c:72:a8:c3:59:81:00:4d:36:0d:5f:b8:42:52:ae:b5:ef:
a9:fb:5c:9e:cd:2d:1b:55:19:ad:e7:15:37:68:6a:4c:9c:be:
ee:8d:67:aa:e9:33:38:e5:5f:b0:0e:8a:80:66:27:3e:ad:f7:
86:04:b7:ef:ce:e6:c2:85:9d:2b:4a:8d:b7:9b:11:69:57:8e:
a6:58:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:32 2025 by rpki-client