Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 7GH1R4FVkKRdBglyGmoNaCUZi61HRkU4MQk19HPf3G0=
Subject key identifier: 0A:F6:0D:79:A2:2C:D9:3A:64:D6:49:A8:65:51:8C:4C:94:BC:0C:D1
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01984708C26A1F67D5504D37BB987D3D1902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 101E
Signing time: Sat 26 Jul 2025 14:00:12 +0000
Manifest this update: Sat 26 Jul 2025 14:00:12 +0000
Manifest next update: Sun 27 Jul 2025 14:00:12 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: jr17gmIGTq2PcIVSRUqLU+lJrnxrAQw/RnrO2q2/FuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:c2:6a:1f:67:d5:50:4d:37:bb:98:7d:3d:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jul 26 14:00:12 2025 GMT
Not After : Jul 27 14:00:12 2025 GMT
Subject: CN=0af60d79a22cd93a64d649a865518c4c94bc0cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:ac:7b:4a:c7:72:70:e2:93:28:20:15:17:
4a:9a:e9:e8:dd:95:6c:30:0d:e6:d8:66:c0:2a:45:
8d:cd:3b:a9:05:da:b2:d7:83:e2:62:f7:31:cd:48:
40:64:df:59:65:86:a2:f2:d4:38:83:37:4e:3c:f6:
18:f7:9d:74:7e:76:0a:4b:7c:ee:74:df:ed:d5:62:
b5:d7:08:a9:e4:97:29:c1:1f:74:0f:75:c5:ad:57:
9e:4e:eb:0e:89:13:55:b5:4a:44:36:9b:21:8d:21:
12:83:6a:00:cd:5d:a5:fb:b2:04:d1:fa:4a:33:78:
f6:f3:14:d9:7a:88:4a:56:90:eb:cd:57:59:f2:7e:
b8:d2:6f:9a:0f:7d:a6:5d:7d:55:e3:1f:e2:ec:85:
39:8e:f3:fa:da:32:3d:b9:00:24:35:83:1c:97:d5:
f8:a2:83:61:30:77:ca:b9:cb:c7:4c:69:2b:f6:03:
e0:5b:39:dd:3c:a1:93:62:0d:e6:6a:f4:b1:62:64:
10:97:c7:78:68:e4:d6:28:12:eb:ae:06:f3:9d:15:
23:52:37:23:8f:32:0c:0d:40:c9:36:49:84:cf:db:
9d:ef:1b:fb:9a:ac:7e:b5:85:97:f1:a2:2d:8f:e8:
66:20:d9:14:c1:21:58:f1:c9:13:9b:a0:a3:46:9c:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F6:0D:79:A2:2C:D9:3A:64:D6:49:A8:65:51:8C:4C:94:BC:0C:D1
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:41:2c:10:86:ae:f9:1e:d6:5b:25:5f:00:a5:18:e2:15:
ac:79:8a:5f:b4:98:4a:0d:48:6b:01:7b:cf:35:04:52:dd:ad:
13:4b:a6:e3:a0:40:ec:35:40:4c:b4:b8:c2:f6:56:a3:3b:ff:
7a:39:4c:8f:46:b3:2f:cb:76:6c:cb:b3:42:8c:7c:59:93:fd:
aa:a7:f8:a1:23:22:3d:c2:c1:ee:21:a5:09:31:1d:fa:5c:17:
c6:73:db:7a:01:c5:22:e7:f7:49:eb:22:f5:ee:65:72:c0:2d:
7d:06:aa:29:c1:ff:e5:0d:a6:d8:56:0e:c3:69:9d:89:94:30:
c7:2e:d9:d9:20:44:1e:cc:ca:25:1a:ae:6f:de:8f:59:9b:91:
c4:44:93:99:8f:13:0b:a9:ef:73:98:f8:2a:59:39:c9:b1:3a:
19:5d:60:1b:b9:44:b7:a8:35:6b:1b:c9:ec:86:e7:63:d9:6c:
c7:b9:82:27:4c:3e:e8:14:d3:01:9f:c7:fe:e5:e4:ca:67:17:
a7:6c:41:29:5a:6f:35:e2:59:5c:0e:20:9c:6f:dc:74:d7:47:
27:c4:12:fc:65:d7:95:9c:5d:ba:6f:71:ec:29:4f:f7:84:08:
22:cb:28:b2:f9:9f:30:f7:9e:5a:96:ff:9e:72:4d:80:5f:6e:
fa:d0:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:41 2025 by rpki-client