Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: DBbYg4u5M8JcF7JR8jRgBj+SM9BzW38JPC+ad3MCK/Q=
Subject key identifier: C8:19:56:5E:50:08:97:25:40:EA:80:E4:6B:B2:00:99:9D:36:F8:61
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019839F279287DF4676C6493EE9CD98A49E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0EAE
Signing time: Thu 24 Jul 2025 01:00:48 +0000
Manifest this update: Thu 24 Jul 2025 01:00:48 +0000
Manifest next update: Fri 25 Jul 2025 01:00:48 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 3n0fGVlWSBQOPlSsD13vWmK05anzuDTwP/U7mslzEm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f2:79:28:7d:f4:67:6c:64:93:ee:9c:d9:8a:49:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Jul 24 01:00:48 2025 GMT
Not After : Jul 25 01:00:48 2025 GMT
Subject: CN=c819565e5008972540ea80e46bb200999d36f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:ab:1d:67:b3:9b:9e:5d:c8:54:41:c1:df:
d1:d3:21:9e:e9:9c:2e:48:09:da:7f:bf:52:44:4d:
84:fe:a1:aa:95:47:57:01:c5:59:15:bd:1f:10:44:
d4:0b:5d:0f:e0:46:7b:5a:89:57:9a:af:b0:ce:63:
08:f1:40:c6:bd:71:d3:60:80:a3:eb:ca:f6:21:41:
b9:8f:8e:2a:ac:68:a5:fe:ef:e5:0a:10:ff:06:c7:
5a:cc:84:29:58:74:f2:4b:2a:ae:a2:ff:b0:7f:23:
3a:a6:52:2e:90:6a:7f:a5:b6:8f:49:fe:d2:b8:7d:
a3:36:c8:99:5d:a1:e7:06:d3:70:d1:db:13:bc:ea:
e3:f4:7c:86:7a:68:4d:f0:7d:22:e5:5b:c2:de:6b:
88:d2:9e:fd:3b:9f:7b:fe:6a:78:7c:fa:3a:5e:6b:
86:7f:ca:d5:54:f7:d8:12:9a:a0:f1:fd:46:e7:61:
eb:00:89:15:c7:4b:4a:2b:f7:27:9c:54:4c:fc:56:
15:9b:57:2c:fa:e4:21:95:7d:36:8c:dc:ce:67:d9:
89:a8:65:f9:d3:99:48:71:ee:22:b0:c0:22:fd:7d:
e8:a3:82:1d:eb:55:c9:5a:b4:94:b6:4e:25:42:8a:
1e:75:33:45:1b:73:a2:18:0a:e7:ac:89:83:81:ea:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:56:5E:50:08:97:25:40:EA:80:E4:6B:B2:00:99:9D:36:F8:61
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:8a:5d:43:73:69:a1:9c:aa:47:a4:37:3b:6a:43:84:e1:05:
58:ad:82:a2:45:b1:33:23:37:a0:70:fc:8f:48:ae:9f:11:da:
2a:a6:15:e0:d4:fd:e9:12:4a:9c:09:7e:ad:23:84:d9:8a:2c:
b2:65:84:92:7a:86:64:2d:af:ab:b7:70:8f:13:4d:82:86:dc:
1a:0f:01:e6:6a:36:07:14:c7:c0:dc:5e:13:03:d6:62:4c:6e:
76:36:26:db:cf:cc:b3:c8:b4:1b:e2:69:b1:ab:04:27:eb:b2:
e7:75:1c:03:44:35:e7:36:83:a8:1a:67:19:90:a6:a8:54:28:
a0:24:71:1b:c3:63:27:60:40:8f:ec:b0:08:e7:fb:cb:1e:12:
34:18:a2:60:69:76:5c:a4:8f:f0:a3:23:dd:5e:29:e3:55:f7:
e1:72:74:ca:8c:ac:4a:de:b7:f1:7e:56:4b:2e:b8:4b:d7:f7:
ee:e1:b2:5c:4a:0d:e6:d3:0f:db:23:39:78:70:1c:55:99:c0:
1f:29:82:c2:9a:8c:a0:62:2e:3a:f8:8e:01:53:99:62:0a:5a:
d8:75:2e:47:36:49:94:31:0f:88:07:d8:3f:3f:de:b9:ae:5d:
bb:9d:26:3d:38:0f:90:8f:32:01:33:be:40:de:4c:d4:7e:9d:
4f:01:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:43:17 2025 by rpki-client