Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: PCPlpjWvcHhOqEOavGHONP5E118e/8SQLDG+5rjlEro=
Subject key identifier: 3F:59:6B:E7:6C:D7:AB:3E:85:66:1B:E1:E1:BD:AC:EA:C1:48:CC:DE
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0198353A323215959E0984DC7E22A2127D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0E61
Signing time: Wed 23 Jul 2025 03:01:02 +0000
Manifest this update: Wed 23 Jul 2025 03:01:02 +0000
Manifest next update: Thu 24 Jul 2025 03:01:02 +0000
Files and hashes: 1: y0u2Vx8cMDe0mIFNO8kpCOnu1Q8.roa (hash: jobR31+zj60Dy+BOCtvS8OW8wvxi5mY5BhM46weukwo=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: Pmv83BuDeL4uZNAQSIOGyczbjCSNvRUQAR8qE6LtyWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:32:32:15:95:9e:09:84:dc:7e:22:a2:12:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Jul 23 03:01:02 2025 GMT
Not After : Jul 24 03:01:02 2025 GMT
Subject: CN=3f596be76cd7ab3e85661be1e1bdaceac148ccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:4b:56:c1:77:87:1b:cb:9f:cf:4d:1a:de:
25:77:f2:e6:68:29:25:94:15:44:85:31:76:f2:4b:
5b:73:f4:d9:51:16:db:52:a8:89:cd:5b:88:1c:ca:
77:86:2f:5d:47:48:95:23:34:fb:47:67:8a:af:14:
36:4b:f3:85:53:d5:d4:f4:0f:a5:e9:1a:42:80:09:
bb:09:c5:45:3e:40:a1:9b:ac:28:17:1f:23:2a:2d:
c3:f1:97:b3:80:2a:dc:aa:07:6c:0a:59:41:98:39:
f0:88:db:b1:25:8c:29:7a:88:54:3b:9d:ef:e1:c6:
c1:7d:06:7b:66:08:e7:b8:cc:10:e5:1c:43:45:6b:
52:c8:b3:87:07:ba:77:6d:7a:89:85:d0:72:37:39:
95:55:bf:a3:91:47:4b:f2:ac:31:85:21:94:32:f4:
f4:e2:dc:76:ca:be:2f:15:07:18:17:f4:57:a6:df:
f8:e0:88:42:2f:9d:8a:66:71:a4:6e:f1:29:4b:6f:
29:1f:d3:56:e9:2d:e4:14:b3:9d:72:68:7a:44:c2:
0c:dd:dd:d6:72:49:b3:ad:fe:1d:d6:85:ef:2b:10:
e8:5a:d5:86:21:a5:b4:64:66:6b:1a:d7:bd:6c:7b:
7c:ae:39:96:c9:b2:f5:35:f5:6e:4c:4c:20:02:d9:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:6B:E7:6C:D7:AB:3E:85:66:1B:E1:E1:BD:AC:EA:C1:48:CC:DE
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ce:f3:dc:c7:93:6d:c7:1a:ab:03:76:7a:46:20:eb:9b:f6:
4e:d5:8a:26:9b:4d:fc:b6:75:dd:8e:12:71:fb:10:fc:44:4e:
aa:c4:ed:5f:a8:81:1b:fb:9b:00:de:4f:89:a8:4a:f7:2f:1f:
eb:ba:9c:96:41:6c:37:f1:1f:1c:39:0f:ae:19:90:9a:40:97:
44:70:71:4b:4a:58:f8:20:d2:ea:19:8d:9a:e1:24:4d:79:8b:
dc:94:b8:00:2b:60:38:fa:47:24:65:f8:24:fa:44:7c:11:27:
04:3a:a4:1f:c2:67:12:cc:41:2d:6e:99:76:59:ed:84:53:16:
b2:5f:40:9a:f9:b2:06:8a:7b:12:b2:61:28:58:5f:a4:25:db:
18:5f:70:0b:b6:19:b8:35:cc:15:13:78:b5:af:50:63:54:99:
16:2e:47:45:67:05:de:0c:06:81:43:02:cf:d9:fe:d3:c8:c2:
e6:01:f9:fd:c4:48:89:33:f3:e5:e7:b6:64:65:81:9c:4a:34:
45:bd:f4:33:ad:d6:ac:28:1f:89:97:71:19:a6:41:ff:c9:85:
cf:ca:3d:94:1a:63:1d:f1:83:a6:ee:f7:f9:80:4d:c7:dd:41:
bf:98:ac:10:31:3d:05:5d:97:b2:b8:35:e9:84:1e:d3:71:89:
90:4f:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 09:03:10 2025 by rpki-client