Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: fcrZiiaDYZlGEkQYcUI5yn+X51+jkr3n1vGtkrEv6eg=
Subject key identifier: DB:CE:BB:B3:D1:CE:32:B4:BE:FD:3A:BD:E9:30:A5:93:55:71:85:6B
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01984A4189A9B88C13DC120A02459D698265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 10B7
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: Ge/XQvyyr3cyAZVl4Ogl+CkCrT5T0cYl8SO3RaZilbg=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:89:a9:b8:8c:13:dc:12:0a:02:45:9d:69:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=dbcebbb3d1ce32b4befd3abde930a5935571856b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:6d:7f:93:97:6a:ec:d2:e1:5e:5c:e2:8a:
84:c1:03:f4:ce:d7:0f:0a:7f:3d:19:50:a9:36:22:
86:6f:8e:be:6f:0e:ca:09:c1:ab:8d:78:ca:5b:2b:
76:22:f0:8b:bc:07:d2:32:aa:e8:15:51:1d:63:50:
33:63:b8:a2:2e:58:6f:24:19:35:4f:12:c3:ad:6e:
cb:b5:d8:5a:5a:45:a2:f0:7e:1e:e9:aa:fa:1e:3e:
e9:15:71:53:c2:79:ac:92:74:84:35:5b:fd:f4:4a:
1a:2c:b5:25:e8:e0:e1:da:b4:df:93:3b:b7:0c:df:
1b:e6:20:ae:2e:c2:61:18:7d:4c:ad:fe:9e:cf:ca:
7d:01:82:2b:bc:32:5d:b2:59:70:59:62:fb:b0:41:
b8:d8:3e:e3:3a:39:48:41:06:4b:5c:aa:75:15:61:
49:73:e2:27:a3:f6:6a:1b:2c:00:6c:13:2a:88:b3:
ae:b1:2c:26:8c:d5:ea:af:4d:de:a9:77:30:80:83:
96:fe:7f:57:dd:6b:3a:81:74:65:28:54:fe:7d:93:
76:2c:1d:5b:c7:e0:1b:55:92:5d:12:c9:6f:2f:86:
9b:48:d4:22:0e:8d:7b:76:2b:67:cc:91:95:7e:25:
96:76:82:c2:88:7f:7d:c5:9d:f9:f6:34:95:02:9d:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:BB:B3:D1:CE:32:B4:BE:FD:3A:BD:E9:30:A5:93:55:71:85:6B
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:20:60:61:a1:c2:3d:a9:8d:4a:13:18:67:da:f5:97:4a:
50:e3:7b:f8:23:36:bb:af:b7:0a:1a:3d:12:05:85:43:f2:65:
65:0d:39:41:8d:5b:90:de:e8:e0:08:a9:be:33:98:6f:10:94:
4f:ab:d4:c9:f9:a7:4e:ee:39:77:31:f5:ec:56:9b:5e:ba:9c:
49:26:8a:db:25:ab:e4:f5:72:61:74:4f:6c:39:b9:e6:a9:1f:
62:54:57:23:eb:7f:d4:dc:90:38:1c:ec:11:f7:90:1c:29:f8:
b5:bc:f7:d4:04:14:c4:cf:21:2b:7a:a3:ca:55:ec:21:69:2f:
38:70:5e:4a:e2:bb:d1:20:b6:c6:0c:2b:8d:1e:70:15:4f:e5:
57:eb:12:5c:2b:54:17:13:65:14:cd:33:05:e6:ab:c0:c2:92:
7a:a4:88:ed:f0:3a:e8:dd:7d:93:de:9d:0c:b3:8a:b0:5d:54:
f4:1a:f8:bf:2f:2f:78:4e:ef:14:50:35:67:fc:a5:a3:c3:74:
95:fe:8d:6a:49:6a:68:d3:5b:83:dc:22:eb:c2:23:50:cb:41:
f4:a3:f6:b0:d3:c3:20:c4:91:d9:21:76:2f:f5:2a:5d:a4:cd:
fe:7a:61:71:0a:19:1c:dd:67:47:f9:05:94:5a:b8:04:8a:33:
39:85:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client