Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: iTrflWXxAA3vmcLN0ZP95mt8ROp/PCiLjSiG8egJQM0=
Subject key identifier: DD:05:6B:A6:DA:E6:BF:30:68:01:45:38:4D:75:B4:A8:6E:B0:6A:84
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01983314D2C7B3F824E4E01E69DEE0B905EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 15FE
Signing time: Tue 22 Jul 2025 17:00:59 +0000
Manifest this update: Tue 22 Jul 2025 17:00:59 +0000
Manifest next update: Wed 23 Jul 2025 17:00:59 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: Ps531WgSnlINyNBv4at+/Iz59ReQTchuYmoHsardCgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:14:d2:c7:b3:f8:24:e4:e0:1e:69:de:e0:b9:05:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jul 22 17:00:59 2025 GMT
Not After : Jul 23 17:00:59 2025 GMT
Subject: CN=dd056ba6dae6bf30680145384d75b4a86eb06a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:3e:4b:cd:fa:ea:b6:e0:f6:ca:c7:63:ab:
c5:e7:87:f7:47:dc:75:38:b3:e7:24:55:81:b4:58:
e6:0d:02:2e:0c:eb:85:d1:b2:81:d1:10:8e:49:a5:
7f:d1:d1:3e:d2:d3:00:08:a8:17:4b:91:22:60:01:
8d:7d:ca:6c:f1:eb:8e:e5:cd:41:f2:60:08:2c:43:
ea:03:b9:be:fc:c9:dc:b8:2e:11:38:9d:22:d9:88:
af:e1:9f:5e:7f:40:26:21:15:fd:90:a8:7b:cc:e9:
76:04:01:1f:9d:61:3b:96:55:0b:5f:32:cb:ef:41:
0c:05:3f:4f:c5:84:98:30:5d:cc:9b:27:f6:1e:ff:
a4:ba:d4:de:c1:08:bf:27:84:64:6c:50:9e:bf:f9:
d7:c7:15:80:0a:8d:67:91:63:f3:ae:57:d8:bb:b7:
7c:bb:4f:02:74:e0:11:57:05:e9:14:49:c6:7f:cb:
49:9e:a6:1f:82:97:33:ce:6f:11:58:5a:9e:67:62:
55:c6:9e:57:61:a0:9f:96:bc:fc:38:05:8b:02:e2:
0c:2b:b9:c3:03:eb:5c:2f:82:d3:da:52:f5:f8:81:
6a:f2:72:6f:5d:8d:a9:82:88:5f:71:88:6f:c1:ab:
77:fc:61:a1:f5:89:8b:04:59:64:ea:a0:2d:34:bc:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:6B:A6:DA:E6:BF:30:68:01:45:38:4D:75:B4:A8:6E:B0:6A:84
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:a1:da:ca:62:a6:fc:14:d1:a4:e8:f5:f2:a2:23:4c:9f:
fe:5f:66:2b:fe:f5:45:ab:30:bb:9f:20:8a:ff:c8:43:e7:df:
97:56:8e:ed:e4:cc:64:88:c9:bc:43:d6:24:42:18:04:2a:6e:
bd:9d:56:e1:47:53:18:c7:df:58:5a:43:dc:65:7b:7a:43:8b:
91:3d:ca:da:96:6a:11:07:f8:c2:ee:86:1e:11:14:89:c8:a5:
ea:ba:6f:be:73:08:94:2f:5a:47:3d:4e:4b:f5:ac:a0:41:8e:
87:2f:63:f1:e4:82:2b:f1:2d:04:b6:96:c7:fd:0f:c5:34:b5:
4c:c4:7c:89:ac:f3:d6:b4:83:42:e8:cc:93:c5:1e:37:d7:0f:
65:dd:35:1e:0e:ea:9a:d5:e7:c4:b3:e9:d6:b0:ff:dd:b9:ad:
b8:8e:46:25:2f:d3:dd:50:f8:c4:36:35:f0:01:1b:3b:7c:93:
91:8f:8a:b2:e8:b0:3c:f2:96:a4:ba:f1:41:b9:03:86:49:ce:
39:46:02:0f:0e:b5:f4:00:ee:24:99:34:59:3d:39:ae:d7:b3:
6d:e6:0c:21:81:31:f8:2a:1b:18:85:d7:a8:cd:13:4e:26:2b:
ae:65:45:ad:21:0f:9a:2c:18:23:d7:29:61:4e:cc:60:85:94:
9d:38:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:32:00 2025 by rpki-client