Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: cVL9ILQm4AEkdp71LPQaC3CPKcC/ipR3IjehW3EjZHc=
Subject key identifier: BC:69:12:E6:13:3F:7B:60:29:8E:56:C5:0E:C1:69:9A:52:D9:DD:8A
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01984966983F39E9899776D91008ECA2B108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: JhREQEhEVlrtuUpNtG9c207Yfv5ADZa7mSZRVBeRhI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:98:3f:39:e9:89:97:76:d9:10:08:ec:a2:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=bc6912e6133f7b60298e56c50ec1699a52d9dd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:45:8f:30:5c:4f:a9:cf:60:6a:69:07:99:
65:af:97:f3:96:73:ea:d0:43:1e:8a:86:c3:bf:ae:
8d:50:5e:bb:a0:19:75:65:fd:7c:71:6a:09:91:2a:
bf:23:f0:56:83:fe:7b:d0:9c:56:92:74:19:b6:ac:
56:17:3a:39:bb:3c:0e:77:1a:51:68:fb:67:6b:a1:
ca:a4:08:b4:56:f2:be:fe:af:3d:ba:75:06:0e:ad:
bf:5f:d3:2f:df:0c:06:a3:39:01:50:7f:51:fe:4b:
93:e8:a9:f4:f8:5c:a5:01:1b:3b:e0:5e:bb:41:89:
a0:69:2e:cd:f1:78:17:63:4c:06:72:17:69:c5:e3:
4a:87:22:fb:f3:c7:13:4a:ec:12:16:f9:8a:1a:10:
a7:8d:3c:63:dc:8f:0c:ed:cc:ea:17:ba:f8:ad:e7:
e5:2e:df:b7:ba:b1:66:0e:74:26:80:8e:d5:40:13:
1d:d4:05:c0:19:7c:25:6c:ae:23:d2:62:0f:9b:1b:
84:a8:2b:3f:db:45:2d:f4:67:74:6a:77:3c:da:e2:
c0:4b:b3:06:a4:40:cd:5b:65:e1:fd:fa:5f:d6:13:
56:03:30:d7:07:0f:3d:27:09:63:e8:34:e7:65:2f:
5a:f8:15:03:3a:90:50:fa:72:58:93:91:04:9e:09:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:12:E6:13:3F:7B:60:29:8E:56:C5:0E:C1:69:9A:52:D9:DD:8A
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:83:d2:3a:42:6e:f1:0a:26:2d:12:cd:ed:4b:4d:5c:9b:
21:ec:3f:e0:23:d9:7c:28:28:6e:5a:2f:e3:d8:16:63:ec:92:
b2:6c:a2:5e:75:f2:b9:57:6e:9d:f4:26:04:1e:6d:5b:bd:7f:
75:27:5a:47:d0:94:77:a0:78:75:26:89:41:ab:96:1d:95:9b:
78:6f:52:39:11:80:59:d9:72:e1:a7:e4:8d:d3:24:77:82:a6:
48:c8:cd:ea:b6:c1:59:02:36:4a:00:51:04:90:46:80:cd:ec:
6a:52:c9:26:b0:82:ba:a1:04:63:b1:d7:a7:36:25:21:35:b6:
97:ea:8a:3b:6d:11:e1:a5:ee:80:a3:a3:38:f4:68:bb:ad:44:
bb:8a:3f:bf:10:09:19:c2:8e:fa:a2:1f:03:94:69:bf:db:a1:
0f:1e:7c:f3:2c:50:14:32:3f:93:6b:06:db:b3:dc:78:f8:48:
a9:54:2d:70:ca:f2:38:98:a1:f0:d4:4f:df:e7:0c:92:fb:98:
38:12:82:62:6d:f3:01:73:e4:aa:b3:5e:10:92:a5:40:41:31:
04:d4:25:a0:c1:11:ed:81:58:3d:1e:c7:0f:89:bd:68:46:a2:
e1:26:3f:79:c6:00:03:c4:0a:cd:1c:00:98:b4:bd:84:37:10:
1e:f0:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:09 2025 by rpki-client