Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: K0J1NoLgTntpI4ZZpVo0ivDH15BU5N1WMIFl9TBG2ug=
Subject key identifier: D1:48:54:E8:BA:C5:27:43:55:9E:F4:E4:34:D6:C3:6D:B9:8E:AC:CD
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 0198469B2FD030F7B7562A45BFD2E5DABC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 12:00:31 +0000
Manifest this update: Sat 26 Jul 2025 12:00:31 +0000
Manifest next update: Sun 27 Jul 2025 12:00:31 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: VyW7Ox629lgBYlaru/Qzt8ZrUOf8Kq775kmWIsADHOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:2f:d0:30:f7:b7:56:2a:45:bf:d2:e5:da:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jul 26 12:00:31 2025 GMT
Not After : Jul 27 12:00:31 2025 GMT
Subject: CN=d14854e8bac52743559ef4e434d6c36db98eaccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:91:e6:a5:b8:db:8b:72:b4:7a:21:47:e2:
7f:6c:0c:e2:5a:2d:0d:c0:b9:b4:ad:c5:f5:d3:36:
c2:40:e9:12:1e:9e:94:13:c8:c3:3b:a9:47:7c:bd:
b5:cb:77:6e:2f:51:2a:37:11:ec:f7:bb:95:c6:03:
60:dc:37:0b:80:b5:80:f2:3d:66:58:d4:41:07:8f:
35:84:95:1a:c1:c6:bf:3e:2e:0b:6a:a7:e1:c5:00:
85:73:6a:b2:1d:d0:53:e0:bb:b3:fd:c6:a2:49:8c:
46:47:19:a7:27:f8:8b:fb:7e:75:c6:d6:65:fe:11:
b4:40:32:81:71:28:84:47:78:3a:fe:e7:35:a7:52:
1b:45:55:21:05:d9:c4:f0:bb:e8:e0:25:ec:e0:c5:
44:f7:28:fc:13:56:de:3a:6a:a2:42:ff:6d:14:0c:
f4:db:9a:09:1e:6c:27:05:76:ec:c2:91:6e:cb:b1:
bb:ee:ab:60:8b:10:48:be:46:22:3f:69:f1:fa:2d:
2d:74:72:8c:e5:95:2e:59:b8:0d:02:0b:71:88:b2:
01:a2:24:6f:2f:b5:e8:42:28:49:0d:17:9e:ce:f0:
c5:b1:2b:0a:f7:6f:09:a5:3c:d6:e4:7b:0f:97:a8:
db:3e:16:71:85:00:6a:bb:a0:0e:51:18:ec:96:9a:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:54:E8:BA:C5:27:43:55:9E:F4:E4:34:D6:C3:6D:B9:8E:AC:CD
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:6f:f7:3e:5b:9d:ed:cb:c5:da:12:64:45:a6:b4:2b:6e:
0e:83:ba:f7:d2:53:d4:25:2f:63:d7:73:47:ad:e3:0d:0a:cb:
02:18:b9:8c:dc:98:60:e1:2e:8b:c2:10:1f:a0:1b:2a:22:2f:
6a:ed:f7:4f:46:c8:de:11:c6:ec:94:e3:a9:8d:63:3f:b7:c0:
50:bb:bc:89:3c:08:b1:88:48:a0:08:ec:7a:e7:7f:76:bf:f3:
82:d2:e7:6e:93:40:ff:7f:fd:1a:1b:49:4c:33:6e:97:3e:9c:
62:36:47:fd:83:6f:e8:38:55:cf:e0:f2:43:aa:12:b4:b8:73:
af:39:25:37:15:23:60:0c:7e:2a:f3:da:b4:cb:8e:d9:e2:ed:
b8:4c:74:0f:b1:b5:8c:2f:8e:7f:ac:e9:f4:b9:dd:48:21:db:
36:10:17:02:fa:6e:2d:8c:86:05:21:eb:d7:a5:a5:b3:5d:3b:
02:4d:8b:a2:c4:cb:d6:6d:67:2f:2d:dd:1c:53:0a:5d:27:2a:
e0:56:ad:c5:45:fc:8e:68:03:af:e7:8a:d3:23:07:3d:0f:a7:
e2:55:9e:7e:e4:b5:c3:a5:e0:15:2f:90:68:17:ad:2f:d0:6c:
2a:f9:e3:89:aa:70:8f:91:7d:59:24:e5:c6:2b:35:41:7b:a0:
8f:6d:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:44:23 2025 by rpki-client