Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: s3DFMVF56VcvXSLvnUQ/qsitCm0DDbuzXjraXDrZIN4=
Subject key identifier: 26:81:90:E8:4B:C8:5D:37:7A:6E:05:8E:96:9A:6D:69:72:25:6D:4F
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 0198499BD2AEE969E04915C7C845D676BEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:05 +0000
Manifest this update: Sun 27 Jul 2025 02:00:05 +0000
Manifest next update: Mon 28 Jul 2025 02:00:05 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: YNXbT936EF4+cNAtxPpmZbpN4Wd286S5vqAOLWz4Nr8=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d2:ae:e9:69:e0:49:15:c7:c8:45:d6:76:be:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Jul 27 02:00:05 2025 GMT
Not After : Jul 28 02:00:05 2025 GMT
Subject: CN=268190e84bc85d377a6e058e969a6d6972256d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:95:a4:33:67:fe:08:f7:d6:11:d3:63:04:
f3:d2:73:5c:69:46:89:db:fb:d6:36:cd:9a:a5:cc:
10:e3:7c:77:e1:9f:9c:65:26:90:f0:7d:5a:cb:94:
fc:9a:df:b0:53:a1:89:44:67:5b:01:80:c4:ae:b2:
78:da:bc:e2:4a:31:26:f6:44:26:aa:7a:85:ba:e3:
e4:bb:79:d7:ea:ab:dd:11:a8:b0:87:fc:9b:54:36:
94:d5:d3:ee:29:84:8e:c2:bb:6b:0a:e8:64:21:2d:
04:a1:8d:e5:81:53:13:15:97:0a:3a:5a:e6:ce:03:
9a:6d:9d:85:8e:39:a7:54:d4:26:28:5e:f5:51:a2:
5f:ab:13:05:95:be:01:ca:f2:5f:11:b2:0f:6d:a2:
71:90:fe:35:e8:29:56:88:e5:54:e0:44:0f:b7:72:
8b:c0:68:5b:f8:70:46:30:f0:2f:24:04:44:89:81:
b2:25:9a:87:f3:b2:80:b1:76:42:06:31:c3:97:2c:
dd:a7:bc:58:45:19:43:db:b4:b5:78:9f:bd:68:9b:
80:65:b9:c8:bc:a5:39:12:74:80:1f:3e:0f:05:77:
09:26:f1:60:27:1f:56:54:a7:fd:de:d3:63:e2:67:
da:07:ed:51:2c:52:47:2f:6a:fb:8a:15:f7:26:68:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:90:E8:4B:C8:5D:37:7A:6E:05:8E:96:9A:6D:69:72:25:6D:4F
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:24:4f:2f:2f:ab:49:23:0f:03:ad:dc:15:5d:50:63:2b:
6f:51:a4:bd:50:b9:10:b3:9d:05:de:61:04:ee:53:6c:3e:74:
b0:b9:ef:e6:10:dd:ec:aa:87:ff:9c:44:ab:5c:30:a3:ee:47:
bb:1e:d9:a7:43:c3:e0:fd:16:11:ea:8b:93:f7:67:72:25:f3:
d5:9f:12:3c:f6:61:d7:b6:59:58:f6:7a:81:bf:f8:0a:f5:3f:
c3:7a:30:59:b6:e7:ba:5e:31:60:99:4d:d2:67:cc:16:c7:78:
89:cd:cd:89:54:45:39:8c:0b:b3:7b:86:d6:4c:3a:f3:4b:ba:
8e:1e:f0:3e:7f:95:02:d8:31:65:ea:ba:04:5e:90:8d:dc:3e:
f2:75:35:aa:ed:5d:33:12:47:34:f5:98:ab:dd:25:c2:dc:01:
3e:f5:b0:41:33:25:47:7f:62:57:9d:ff:e9:4a:9b:8a:47:f6:
dd:7e:f6:ef:61:c6:e2:16:de:26:e0:53:88:bd:d5:57:7c:c0:
ba:1b:6c:dd:3c:6a:91:d3:c4:6b:e1:ce:44:d0:e5:02:ca:bd:
c2:53:e3:48:a9:be:87:7a:9f:cd:21:92:6b:af:58:cf:96:4c:
d2:b4:e4:6b:c4:d4:46:e5:e3:19:58:9d:fc:61:a7:dd:02:4a:
e3:f7:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:11 2025 by rpki-client