Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: kBlE3M65jJ3MxXKNZ67qBMvcTakfh3/d+kjM0B/2sL4=
Subject key identifier: 8F:CB:6E:54:96:1F:D5:16:C8:4A:51:A1:76:21:46:CC:A3:47:D6:AE
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 019849D2C97B7718C068BADCA46EE3F6C23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0D22
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: wCg0Vj+dTYehT+XfO6ELFW42atvvU9v9qVkpgRyQ8/g=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c9:7b:77:18:c0:68:ba:dc:a4:6e:e3:f6:c2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=8fcb6e54961fd516c84a51a1762146cca347d6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:28:b2:b3:e4:5a:aa:e3:cc:6d:18:00:7a:
74:2f:63:de:88:b9:1e:4e:49:27:a1:54:aa:1f:5d:
99:d3:bc:a4:b6:34:04:02:e9:bf:2a:c0:93:a3:7a:
ef:5f:db:e0:14:80:71:15:ba:96:8f:75:9e:1f:50:
a8:13:65:69:cc:9d:92:76:ef:b3:ea:ad:dd:9b:cc:
75:ae:3d:f9:27:02:f2:c0:d7:6b:e0:5c:a4:30:2a:
76:9c:71:90:6f:e9:bb:7e:f5:51:d6:cf:31:ab:94:
d0:af:86:f1:5c:87:8f:54:ba:9b:71:b4:68:5b:fc:
01:a4:99:98:19:77:0f:fa:bb:d4:07:cf:b0:95:6b:
6f:33:f8:04:6e:e0:54:83:75:76:33:40:74:07:5a:
d9:97:e6:da:2b:58:10:bd:2c:50:eb:46:9e:74:34:
be:a2:57:f3:93:4b:ca:d3:f8:b1:21:3e:32:9e:f2:
75:e2:a1:73:e6:5d:63:7c:3c:d8:75:a4:7b:d0:09:
8f:0c:b0:cb:fb:b0:08:75:ef:d7:07:23:b1:46:74:
3d:d9:1b:57:fd:86:89:31:f6:e5:ca:5a:d4:c1:73:
71:b4:23:0d:86:51:dc:97:b3:79:b9:f8:0a:f0:bf:
32:63:c7:3c:65:69:bd:62:82:92:fc:ff:c3:f7:9d:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:6E:54:96:1F:D5:16:C8:4A:51:A1:76:21:46:CC:A3:47:D6:AE
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:3c:6c:34:88:85:de:f1:1a:2e:3a:ea:59:a0:3d:9c:16:
33:41:10:7a:01:a7:94:4d:9b:0a:02:93:64:f9:e3:a4:b8:a8:
a3:be:93:b5:b0:d8:ad:2a:cb:83:f8:d0:86:e6:b5:44:68:48:
90:b8:d9:bb:bc:a3:bf:80:21:b6:5c:e1:4b:87:40:e8:13:ac:
5e:43:8a:7d:df:15:3b:6b:eb:ae:bd:f2:e7:26:e7:17:15:75:
06:c5:4f:26:74:89:63:a7:95:a7:c1:b7:7e:6d:dc:7b:3d:50:
fa:6a:21:5e:63:e9:05:96:8a:c3:37:c6:9a:fd:9b:bc:cf:72:
43:c7:a7:9d:ff:c8:78:ca:e2:2a:2d:cf:01:a5:95:80:21:6c:
e7:17:29:05:c7:7c:21:e0:bf:56:74:40:be:b5:34:65:03:5c:
ee:8c:30:68:48:db:5f:4c:06:72:18:5c:73:74:e1:cd:fe:bd:
7c:81:6d:75:28:95:19:a9:17:79:31:40:21:e6:cf:25:13:aa:
ec:08:9e:6e:0a:57:2d:2d:7c:b1:8d:bc:28:81:5a:99:ba:62:
68:e8:32:ee:73:ba:02:b5:4d:ce:9f:7a:fc:44:ef:33:d0:ed:
b7:eb:cb:97:2d:be:21:79:1d:da:a2:cc:9b:38:38:72:93:30:
d9:1b:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:22 2025 by rpki-client