Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: 06tWqVwm+x+nBKDKOCfCcBKYk7ZgldtscG8mmgVsNtI=
Subject key identifier: 29:52:5E:0C:0B:A1:70:3F:05:D6:77:A5:2F:EE:B8:43:ED:3B:58:67
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 01984966180347E3E6511F395373AD122135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0DF5
Signing time: Sun 27 Jul 2025 01:01:24 +0000
Manifest this update: Sun 27 Jul 2025 01:01:24 +0000
Manifest next update: Mon 28 Jul 2025 01:01:24 +0000
Files and hashes: 1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: ksn90/Y6ihp45wqerGkhP+HNumOamPgq29FZTTZXK1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:18:03:47:e3:e6:51:1f:39:53:73:ad:12:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Jul 27 01:01:24 2025 GMT
Not After : Jul 28 01:01:24 2025 GMT
Subject: CN=29525e0c0ba1703f05d677a52feeb843ed3b5867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:d2:bc:bd:01:2e:84:e4:8a:f4:8a:49:a7:
f8:a2:c9:b8:b7:e2:64:b5:4c:cf:b1:06:62:7d:9b:
e6:8f:a4:f6:3f:2c:45:cd:a6:56:0b:a9:bc:36:5b:
5b:00:6b:e7:2c:1e:85:f8:da:04:5d:4b:d2:d7:7c:
3a:1c:77:7f:69:c2:55:ae:7e:7c:f6:7c:01:b5:81:
a5:70:68:9b:a1:e8:55:8e:14:05:ff:d3:30:be:89:
5d:a7:0c:08:37:44:47:2e:5f:90:ec:d9:89:cb:74:
fd:18:a3:4b:fa:ba:89:de:92:1a:94:6b:bc:f0:9b:
ad:be:b6:89:75:0b:37:58:f2:a9:cb:1b:d7:94:b9:
12:63:c0:dc:72:7a:9c:b2:4a:57:b6:05:16:56:08:
1c:a1:47:8e:39:d7:39:d6:c7:d8:3e:d7:fe:9d:b4:
24:05:b3:98:df:48:b2:7a:5f:da:d1:3c:97:ce:1f:
2a:b3:f5:45:f9:84:b0:fb:35:05:38:76:e5:ca:6b:
b1:ee:ea:1d:8f:3f:d9:e3:a5:87:cf:1e:aa:65:93:
d6:cc:c4:f5:f1:ee:0d:41:bc:66:6a:59:20:37:8b:
71:ff:31:b4:38:f5:c9:d7:2d:46:bb:aa:a7:4a:14:
73:ad:9d:0f:3e:18:23:bf:e8:9e:f4:3c:15:a9:13:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:5E:0C:0B:A1:70:3F:05:D6:77:A5:2F:EE:B8:43:ED:3B:58:67
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bb:72:05:a5:73:a5:a6:eb:89:ce:34:f9:10:e1:39:95:0e:
04:5c:88:cf:4c:5c:07:eb:40:a9:18:26:6f:07:91:c3:61:a4:
a7:ba:27:a9:86:44:17:84:80:2d:3d:e5:8b:f9:d1:c7:6d:a2:
3e:1d:a3:f3:56:02:83:e9:e9:0f:04:b1:16:d0:b1:3f:67:24:
4f:bd:69:64:fc:a7:ad:af:fe:46:81:0b:bf:97:a4:1d:7c:63:
47:74:a7:7f:d6:b4:cb:f6:55:ec:b7:e5:ee:e0:78:7f:f1:fa:
9e:2e:c2:2b:c3:10:a4:63:29:69:71:58:0e:b8:f8:9f:df:2d:
60:08:90:60:a1:9e:18:20:bc:89:00:86:0a:96:c5:84:08:43:
b5:9e:d7:13:c4:17:7d:0c:5a:69:9f:96:27:45:10:40:30:f8:
4c:84:4c:c2:82:59:3d:2b:5a:fa:18:f7:fe:b5:3d:aa:a8:76:
cf:5a:9d:3a:d6:b5:e2:c0:3d:93:f8:1a:2c:a2:31:6a:82:a4:
54:9c:ef:88:70:12:95:55:8b:54:15:c0:53:45:6f:10:f6:75:
37:ca:d5:15:02:ff:62:d6:e5:7c:a6:b8:6e:4d:b4:a8:5e:16:
13:89:d4:d9:fa:93:fd:bb:97:2a:9e:92:c3:d8:9b:36:fc:fb:
50:31:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:34 2025 by rpki-client