Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
File: zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft (raw, json)
Hash identifier: oTezRwmpw4SzMxsi+3bo1dvNKj8fZphVBYYFcrMCRVY=
Subject key identifier: 80:81:C7:C1:5B:48:B3:68:A9:58:F9:D7:39:4B:DE:A9:A2:F4:18:30
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 01984965E38384D756E93E33924BA4571C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
Manifest number: 159C
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: YqsIJO2_ffnr84dFD6FPVdm33CU.roa (hash: pxoJD8X1pGpkVmBMQ12ROsjSsHVTYIEf7xsdsWhn70g=)
2: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (hash: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=)
3: zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl (hash: 1k7jCH2XEYGI08AHWGmsE8bCxTEeSK4vLEZ4jXqkuOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e3:83:84:d7:56:e9:3e:33:92:4b:a4:57:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=8081c7c15b48b368a958f9d7394bdea9a2f41830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:b5:64:a2:0b:9d:c8:f9:d8:cc:b8:48:b9:
62:bc:5c:c8:7c:d3:d3:bf:8c:93:8d:e4:6e:d9:45:
9a:50:a9:4a:b6:73:b7:df:25:5f:4d:03:a3:a4:6b:
a9:f8:91:98:c9:c4:a1:27:42:98:93:ba:f1:4f:e6:
d5:56:6a:15:f2:dd:9d:a8:55:4a:0c:9d:c9:92:17:
71:c1:fa:63:8b:23:2e:7f:79:e2:2f:b6:70:3b:a4:
94:35:1f:13:3a:a5:a1:85:b0:15:c9:a6:5c:69:73:
03:28:a9:73:4d:4e:26:d7:90:d5:1c:ed:28:b3:46:
0d:02:9a:08:b7:91:76:86:6f:cf:16:67:e5:0a:95:
05:39:4a:49:20:e0:3a:ad:18:d7:f9:2f:bc:4f:f7:
5c:8a:bc:ba:c0:08:19:fd:d8:dc:e2:a3:51:a0:b8:
17:1f:87:d5:eb:7f:a6:00:f1:04:82:47:b5:82:c2:
87:57:be:ab:66:9d:82:8b:52:70:0b:f8:c9:65:2b:
60:5d:ae:9e:d2:48:95:b1:61:a7:a9:d6:a1:d6:7a:
7d:b9:0b:31:c5:13:14:17:10:e4:92:25:28:08:f9:
66:80:6b:6b:75:ce:3d:ce:ba:62:40:19:c9:7d:41:
42:ac:fd:60:58:a9:39:85:fb:30:ef:38:fb:8d:84:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:C7:C1:5B:48:B3:68:A9:58:F9:D7:39:4B:DE:A9:A2:F4:18:30
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b3:7f:ab:94:5d:b5:b9:68:51:61:8c:c7:e8:de:58:f7:7c:
69:df:84:f9:56:84:51:c3:84:34:da:70:72:f7:33:26:fd:df:
ae:a7:97:c2:ba:18:0b:df:b3:62:00:f4:52:a8:ae:1e:62:c4:
ce:d0:3b:e9:78:cd:69:eb:a1:5d:ea:e5:3a:0a:46:57:24:a2:
52:58:13:91:67:01:8e:95:52:7e:99:f1:84:4c:6a:80:b9:fa:
10:42:9d:31:90:47:a7:a7:a1:a1:02:e4:b3:83:e3:e8:5b:47:
13:d5:4a:8b:38:df:82:14:15:03:e1:3c:f0:c6:72:f0:fa:cc:
2a:44:d7:c4:91:ae:64:8b:c7:a8:12:5c:fd:e7:5f:e6:0e:b1:
ae:9e:47:46:01:c6:17:c3:58:94:db:e6:68:1f:53:10:78:5c:
fa:36:ee:40:c9:81:bd:65:b6:36:14:bc:11:f4:52:5d:52:ef:
47:3d:38:72:3b:a4:32:cb:b2:76:34:93:71:b6:eb:48:74:c9:
28:f1:5d:9e:3f:8c:1a:95:ff:6b:17:6f:01:71:fd:b8:89:a1:
ab:c1:88:47:07:d5:c4:0a:f5:0b:e9:8b:69:cf:97:22:81:63:
fe:a1:23:23:ac:6a:00:de:3d:f6:20:ec:09:77:7e:0c:5c:d3:
43:3b:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:03 2025 by rpki-client