Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: 3ZXWbrIPFbpUNHq1hr9Zk3dVTxLVxGN51Csd4Cj0/Xw=
Subject key identifier: 5F:3D:BC:48:C5:34:C2:0D:45:1B:F9:EF:23:68:72:02:24:56:D8:A7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019847E4C1FF6090B9C9346EED1F3EF36DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 160B
Signing time: Sat 26 Jul 2025 18:00:30 +0000
Manifest this update: Sat 26 Jul 2025 18:00:30 +0000
Manifest next update: Sun 27 Jul 2025 18:00:30 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: ecx+ehfHIDsif/Uuujn72PiKwNz3AIpRlvnMUyZ/0Yk=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:c1:ff:60:90:b9:c9:34:6e:ed:1f:3e:f3:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jul 26 18:00:30 2025 GMT
Not After : Jul 27 18:00:30 2025 GMT
Subject: CN=5f3dbc48c534c20d451bf9ef236872022456d8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:6f:0f:4f:cb:4b:4f:23:5f:1f:20:25:43:
d7:aa:5b:bc:24:02:20:0e:85:22:13:31:3c:16:b8:
2a:79:60:b0:21:a0:83:07:e9:91:bf:6a:ff:82:b5:
7d:da:7f:76:53:e2:0c:0e:f7:c7:3c:1b:67:5f:3a:
29:79:3d:2e:4c:c4:3f:d3:79:f6:74:67:dd:7b:8a:
69:fd:45:b7:35:c3:1a:ad:c7:19:bc:20:af:09:6d:
10:92:bb:f0:af:0c:a7:74:82:08:8b:da:b4:7b:a6:
4f:b9:17:b6:b6:a2:ca:b7:85:52:73:1c:0f:c2:42:
4e:ae:d8:dd:5e:df:d6:fd:15:7d:36:b8:e7:c1:64:
cd:68:c1:ee:27:49:84:2d:59:f7:82:c6:44:50:7a:
ce:2d:38:e0:85:d1:31:97:fa:52:24:7e:f9:ad:91:
5f:dc:5d:9d:1a:02:7e:56:55:a9:cd:52:8d:b1:3a:
76:36:46:43:83:9c:b9:d5:a5:ce:fe:ca:6e:3a:7a:
83:e5:9c:38:4a:e9:96:91:8a:d6:08:1f:12:33:4f:
91:aa:62:db:84:97:4a:19:9f:38:b6:0c:ac:0e:92:
aa:d8:f4:a1:62:24:18:c8:26:54:ea:80:1c:ee:ff:
c3:b8:17:10:c0:70:39:e3:90:8c:6d:da:d1:0a:fd:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:BC:48:C5:34:C2:0D:45:1B:F9:EF:23:68:72:02:24:56:D8:A7
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:37:07:b2:04:b9:74:8b:da:54:04:54:f5:43:0d:07:88:
e2:01:81:b6:42:cb:4d:b4:92:cc:f3:b9:bf:79:3f:bc:76:35:
82:fb:88:33:91:e2:50:07:69:6c:a7:df:99:73:ac:89:8b:ba:
d0:eb:7b:2d:80:63:f5:23:e6:91:c7:8e:b5:f0:6b:a6:e2:38:
20:6f:66:f9:8d:35:be:10:e1:64:d6:d1:df:eb:87:48:82:fb:
1b:6b:e8:25:df:42:98:5a:26:57:cc:0d:ee:db:15:ba:86:b0:
9c:ae:cc:db:91:98:9a:33:84:1d:7d:ec:81:61:aa:9f:ea:9f:
46:b1:6a:88:ec:84:13:75:01:6c:4e:0d:54:5b:8a:3d:f6:10:
c2:5c:6f:79:a6:ab:98:98:11:79:95:79:71:75:c8:d6:ef:a8:
28:84:22:b1:f3:09:6d:cb:15:4f:e4:d4:76:e4:9d:90:30:da:
46:c5:4e:54:39:e1:87:22:9a:3c:a2:5f:dc:b5:a9:63:3f:25:
ef:da:6d:78:3b:cb:ac:6f:1c:29:b5:4b:ef:6b:63:76:30:d7:
cf:aa:bd:6e:f0:cc:2f:16:47:13:96:24:a7:6d:90:e8:1a:d6:
60:21:c6:98:28:ca:5a:91:83:0f:6f:c7:c4:37:4d:f0:84:aa:
f2:b5:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:05 2025 by rpki-client