Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: +JHdAb7J7V9vvL+FznLkYe/Wid2KB2HDhv8pNuIEdoo=
Subject key identifier: B6:B2:9E:F4:AC:51:80:FC:C4:C2:E9:3C:AD:66:A9:2E:81:91:16:03
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 0198541FEE0C50948E80DD2D059C360BE9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 03:00:35 +0000
Manifest this update: Tue 29 Jul 2025 03:00:35 +0000
Manifest next update: Wed 30 Jul 2025 03:00:35 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: BtP+aoyPugGdZ57R+4q1XzWutVrsfonn7bBdqS2SKzw=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:ee:0c:50:94:8e:80:dd:2d:05:9c:36:0b:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Jul 29 03:00:35 2025 GMT
Not After : Jul 30 03:00:35 2025 GMT
Subject: CN=b6b29ef4ac5180fcc4c2e93cad66a92e81911603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:4b:42:dd:5e:36:e1:01:4f:b9:03:31:6a:
50:d9:8f:51:54:eb:66:d5:90:0e:bd:fa:28:fc:6b:
6c:3e:f3:35:3d:9a:ee:20:71:e9:ea:e8:86:aa:33:
aa:43:6e:ca:1c:7a:00:bb:cd:da:0a:f3:f6:87:66:
9d:5d:a1:ac:8c:32:3d:33:be:76:4d:e9:99:3b:3e:
13:7a:2d:6c:5a:b1:f3:86:4e:b2:b4:10:38:1a:a2:
92:f8:7e:a7:7a:13:0d:4b:3d:24:a9:67:5e:54:94:
8b:51:5b:aa:4e:37:14:1c:2e:ff:38:e5:8f:4f:35:
59:4c:ca:44:52:09:cf:de:81:64:24:6f:dc:94:75:
bf:af:3c:dc:86:49:93:4d:0e:52:22:41:e5:cd:7a:
ad:e3:bf:80:e1:0a:81:ad:bf:ab:6c:5f:ff:e0:74:
f0:75:23:55:1b:f3:f1:2c:9a:ee:9f:8f:39:46:31:
3b:07:7a:6c:99:a8:d4:d3:33:93:c8:c7:8a:cd:f5:
bb:89:90:42:7e:95:4e:2f:87:ab:2c:f3:d6:7f:d2:
93:0d:42:53:4c:a0:b5:15:40:86:d1:2b:69:33:53:
07:8a:d9:cb:7d:f9:53:df:e7:1e:5e:98:eb:e1:6c:
88:15:06:d7:ce:81:7c:96:59:d7:61:45:f6:95:ac:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:9E:F4:AC:51:80:FC:C4:C2:E9:3C:AD:66:A9:2E:81:91:16:03
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:dc:b0:68:5e:aa:26:65:f9:72:be:82:7c:e8:78:9e:58:
9f:52:24:91:8e:1c:f6:fd:d6:7b:49:64:d2:11:62:e3:42:9a:
f5:fc:51:c1:6a:09:59:ab:c1:29:d6:74:a2:cd:c9:82:36:8a:
19:5d:d4:27:98:d2:e4:fe:c9:9f:50:c8:1b:74:06:fe:e0:39:
4f:d2:b8:6d:7d:53:1b:f3:df:a0:01:fd:c0:3c:b0:03:14:0b:
e4:2e:cc:06:8f:90:b6:2b:a8:6d:3d:87:97:31:2a:78:4a:22:
0c:65:52:9b:e8:0f:0b:4c:4f:07:66:c1:84:08:1b:16:c1:95:
d4:fa:b1:54:2a:e6:82:89:78:99:af:dc:80:74:6f:d5:6c:18:
23:4e:1d:53:42:19:d7:1e:4d:90:ca:f2:9a:e1:a9:99:81:6b:
b9:9e:58:17:f5:2d:70:78:ea:f7:be:0f:ca:0a:16:bf:95:1b:
92:d2:a4:67:61:b3:44:30:92:d4:fe:4d:bd:9b:e0:ce:77:db:
5a:86:db:de:4e:24:11:e1:89:dd:24:55:1a:ab:1f:19:13:cc:
3f:eb:07:9b:2e:28:40:19:54:76:da:0b:ec:b8:81:7e:a4:17:
fe:0c:68:b3:b8:ac:35:9a:e3:90:6f:c9:7a:e4:1a:29:f5:38:
70:d9:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:36 2025 by rpki-client