Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: rVo+f2vl82aEvB4r4nRa5KWVMmLHnMYqEQRAgtHdi9A=
Subject key identifier: B9:EB:34:DA:EB:AA:7A:17:3A:56:24:89:FF:FA:EA:02:E0:7F:02:AC
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 01984AE56D79B15161E89A44AAF1F7F1A0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0B76
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: ZkvI6nw9clRTNP+q2uUwvGbzBdFw3KzUsFlwnbvu6ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6d:79:b1:51:61:e8:9a:44:aa:f1:f7:f1:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=b9eb34daebaa7a173a562489fffaea02e07f02ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:d9:21:66:78:dd:4b:16:03:94:92:ce:b7:
a6:33:1a:d1:6b:e6:30:77:7d:88:c0:d1:24:b3:b4:
f8:25:cb:b3:e7:12:e5:dd:d1:2c:75:a3:86:a3:ae:
bc:63:64:9b:de:e4:0a:74:df:dc:79:56:d3:84:31:
11:c3:23:61:a9:cc:fd:0d:59:eb:03:5d:78:81:20:
77:0b:d6:c1:35:de:c2:5b:a2:8a:79:0a:39:c6:19:
2d:e1:f1:25:e2:f1:0e:f9:22:e8:44:3b:63:ec:b4:
5a:6d:3c:ab:83:ad:e9:f3:7b:6c:41:0f:8d:98:d6:
81:cd:5d:c0:56:9e:0b:52:18:97:cd:34:af:7b:85:
30:b2:fe:41:2b:e7:75:35:4d:ca:21:e3:e1:f9:f7:
9b:92:10:37:69:03:c9:be:57:b9:ed:d9:a8:87:1b:
06:fd:5b:c4:43:ed:e5:59:bc:89:9e:17:81:04:23:
ab:b8:dd:6f:f1:cf:c2:88:63:4d:bc:f4:8f:4b:aa:
0f:68:98:f7:f6:a6:e0:4f:59:01:e3:22:17:c7:1c:
7c:0f:7f:f3:a1:f4:98:6b:11:88:98:99:22:af:d4:
e8:08:c5:07:62:80:d5:25:d2:61:be:9e:e5:81:90:
28:95:0f:46:3b:5a:27:86:8c:38:cb:8c:92:22:ed:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:34:DA:EB:AA:7A:17:3A:56:24:89:FF:FA:EA:02:E0:7F:02:AC
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3a:90:5e:d2:82:23:26:b1:df:6a:e9:e0:26:e8:d7:99:84:
6c:34:a4:88:87:33:b6:b4:63:36:be:e7:d0:5b:38:a8:ce:ef:
40:17:5f:31:69:55:5a:53:62:a7:4d:b6:ef:c0:21:f6:ac:bc:
99:19:cd:63:72:fb:de:84:b3:4a:3c:d1:38:49:27:29:e8:e9:
36:31:12:cb:6c:ec:dc:5c:5d:08:11:bf:85:8a:8b:04:34:94:
04:2e:99:56:f0:59:a4:35:77:7a:40:16:19:81:f5:b0:5d:25:
f9:66:fd:2c:89:c4:41:28:0e:04:f3:9d:26:03:b2:de:00:49:
79:bc:ba:88:60:86:65:bc:96:32:2b:17:e0:df:35:a7:cc:96:
84:c4:94:98:97:17:39:44:60:fd:e9:63:b0:5c:85:c7:81:7c:
5c:fb:2a:2b:8b:b6:64:db:c9:e7:1d:32:60:61:1b:bc:89:d7:
f8:d4:13:bb:84:0d:74:e5:7a:e3:e6:ef:06:61:07:c6:c6:81:
18:5d:46:b4:7c:3f:7d:35:8a:e1:6d:55:b3:b4:2e:34:29:33:
1a:33:2e:12:5f:3c:29:46:87:96:db:55:be:1f:91:5e:11:b5:
e0:8e:2c:40:d4:9e:a2:2f:5d:83:1d:5a:f5:68:9c:0d:fa:e7:
97:3d:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:07 2025 by rpki-client