Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: 6dIEm0n7DopEBWbGFt8l9Tk8a27W0E0CilXO/9YSbYQ=
Subject key identifier: 19:9C:0E:E5:7E:30:E1:36:85:C6:D8:87:37:4D:E3:56:7E:54:3A:78
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 0198425056C98CB37DFB32FED7341A4C2C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0996
Signing time: Fri 25 Jul 2025 16:00:17 +0000
Manifest this update: Fri 25 Jul 2025 16:00:17 +0000
Manifest next update: Sat 26 Jul 2025 16:00:17 +0000
Files and hashes: 1: CXaycMVQIz4mD7AGkHky2lc1t_E.roa (hash: XQ8QKr5tV5GANcYht5PHTQQD2/hz4d9yrWShPJMOBBM=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: nnJrVhy89xkClPN18sBFJcWi9qAjI0qdYj5+25uunH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:56:c9:8c:b3:7d:fb:32:fe:d7:34:1a:4c:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jul 25 16:00:17 2025 GMT
Not After : Jul 26 16:00:17 2025 GMT
Subject: CN=199c0ee57e30e13685c6d887374de3567e543a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:c9:6b:36:e2:a9:f5:77:7d:b8:02:fe:b6:
ba:51:60:db:a0:5f:32:73:30:ed:b4:c8:ed:92:07:
21:cc:16:ca:67:1b:df:14:c8:f6:f1:ff:f7:4b:25:
8b:2c:5b:fd:73:f3:83:b0:a1:a7:fe:90:a7:d1:1c:
38:65:92:0d:99:53:06:b1:bc:e1:59:63:b6:68:d2:
e0:40:9d:f5:24:34:65:4d:64:9f:c1:5d:56:03:ad:
25:0d:30:90:ca:21:cb:ac:cb:22:3e:ae:12:57:e8:
f2:c0:9a:10:c5:c7:8b:67:2d:b3:5a:b2:56:55:b0:
3f:d5:30:f6:2d:44:47:27:58:9c:77:17:0a:c4:81:
73:d6:ab:7b:dc:d4:68:96:b9:7d:0b:24:e2:44:ac:
c8:75:dc:aa:09:e7:18:39:0d:79:10:b5:8e:04:60:
01:f5:1b:9f:c1:63:8c:66:5b:31:8b:39:ee:7e:7b:
34:5a:8e:ca:0f:ee:6e:7f:ec:f8:15:96:1f:43:d2:
10:0c:32:11:46:9c:e9:b0:59:88:2d:12:b3:7e:d3:
d5:87:b6:0e:1b:61:6f:8a:ac:c0:7e:2d:98:57:9e:
be:6c:e6:17:29:e5:54:1f:bf:9f:91:13:84:57:ef:
72:bd:95:a1:c4:80:1b:a8:df:f5:3d:ec:f0:98:e0:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:0E:E5:7E:30:E1:36:85:C6:D8:87:37:4D:E3:56:7E:54:3A:78
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:44:57:84:62:fa:67:d4:f4:c3:82:5b:7b:b5:d1:2f:9b:2d:
35:6c:70:77:61:3a:46:4c:3f:61:0f:62:8e:c3:c7:b3:de:0b:
f2:4b:79:6c:f1:58:1c:cb:ad:de:30:4b:54:3a:4e:e3:92:be:
91:da:0e:54:ed:6e:d4:1a:2b:d3:5b:40:63:b4:42:60:88:ef:
d3:5a:d4:20:b6:33:88:68:11:9e:db:80:a7:aa:9f:b4:49:90:
9c:67:15:be:59:6d:96:51:08:3c:8e:47:c3:be:a2:ba:ef:55:
d7:a3:24:db:03:f4:10:96:9f:c6:f4:28:ff:43:f7:7a:7f:72:
9b:24:d1:4c:1b:0a:ee:34:3c:10:30:7c:c0:b3:ae:41:ad:e3:
57:dd:cb:0d:97:4e:b4:38:84:3d:0a:cd:46:f3:05:09:80:74:
a4:69:e2:3a:75:86:4a:98:f3:4a:ab:f1:7b:6d:5c:a1:cd:a7:
a8:16:65:cd:7e:62:df:c5:8b:60:47:8c:4f:bc:07:19:82:33:
47:64:cc:af:6b:c0:39:4e:7d:36:0b:82:ad:81:c5:fa:15:d0:
f3:9b:bf:6d:a1:d2:a2:04:d3:4a:94:85:e6:bc:f2:6c:0e:99:
4c:a9:c7:32:02:72:a1:e9:3e:a3:2d:b7:66:6a:7a:22:b6:b6:
ff:6a:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:59:17 2025 by rpki-client