Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: ZI6sBDrS2SSlmOn1Tm8aO6WtymdYDX3bzGCxNaewg1c=
Subject key identifier: 88:62:5E:2B:EE:10:AA:E6:D3:2C:5C:23:1B:7B:CB:5F:32:E7:E5:41
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019827B579028F65EE27F344B7C334941994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0A57
Signing time: Sun 20 Jul 2025 12:01:00 +0000
Manifest this update: Sun 20 Jul 2025 12:01:00 +0000
Manifest next update: Mon 21 Jul 2025 12:01:00 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: M4YHyWZ8d9QwjdTB0MjlA5TMBXdufMWkLLB0Owc+D+s=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:79:02:8f:65:ee:27:f3:44:b7:c3:34:94:19:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jul 20 12:01:00 2025 GMT
Not After : Jul 21 12:01:00 2025 GMT
Subject: CN=88625e2bee10aae6d32c5c231b7bcb5f32e7e541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:10:9c:96:04:50:86:ba:dd:e8:3c:a0:e4:
af:d5:b3:5f:f9:77:49:3d:42:fc:6f:73:90:70:11:
86:77:f4:51:04:90:0a:98:01:1e:d7:e0:de:67:0c:
59:b4:6e:c9:af:92:07:28:e7:ba:05:50:7a:da:84:
c8:5d:64:f4:e6:95:9c:4b:52:8a:07:c2:74:8c:35:
2e:91:43:b4:ff:6d:34:d9:4e:ca:6f:8e:4a:cd:9d:
55:8e:aa:13:06:2f:6d:47:4b:27:30:f0:a9:3e:b1:
46:0c:2c:60:b3:b8:fc:05:3f:92:86:ee:75:14:75:
bf:87:6f:a6:8c:6c:8e:e8:2c:f0:19:5c:34:8a:ed:
5e:7f:28:95:34:72:f2:20:41:53:5a:bd:e5:e2:f4:
c6:10:e1:42:ea:18:35:99:5a:89:d4:21:94:89:ca:
b5:10:24:51:31:09:1d:ca:ed:5b:65:df:11:f4:68:
51:d9:1b:5e:1b:e0:37:b7:c1:66:2c:df:61:a1:0a:
b1:07:9a:fa:56:80:38:4d:55:2a:f1:b6:3b:c7:ce:
4a:3f:8f:13:b1:91:28:41:f7:f6:72:64:79:ac:30:
9f:0d:54:a0:e7:15:36:9d:e5:a2:ef:b9:98:9b:b9:
99:a8:0e:27:be:d6:e6:56:03:9b:1d:8b:70:4a:fe:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:5E:2B:EE:10:AA:E6:D3:2C:5C:23:1B:7B:CB:5F:32:E7:E5:41
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:3f:6d:80:2e:c8:b9:e7:61:5d:28:d7:30:5a:db:80:81:
83:8e:4a:85:17:59:1c:30:a3:c1:99:3d:14:aa:5f:dc:05:06:
ab:5c:4a:c7:40:22:86:dc:16:33:07:e1:07:a8:06:9d:8f:77:
aa:dc:20:ee:fa:79:0e:40:a6:0a:13:0c:5d:46:4d:8d:7c:ff:
fc:53:d2:fe:14:81:16:71:5f:57:ad:c4:cb:3b:aa:fd:e0:83:
77:64:8a:49:1d:54:d3:2c:07:30:f1:b0:60:4a:f4:84:72:e1:
03:bd:dd:fa:9f:03:02:f8:50:c1:d9:12:5e:27:55:69:a2:23:
e9:9c:5a:16:7b:87:ba:1b:c9:36:53:38:04:c0:09:33:be:07:
de:b2:0b:59:e9:f6:1f:1f:ab:03:88:65:96:d6:03:11:a0:47:
60:1d:6d:57:4c:ee:4a:ae:e8:97:3c:3e:48:6e:4c:2c:5f:21:
ff:ee:dd:b9:73:1c:8e:a1:d4:71:7a:f9:05:e4:04:15:89:52:
95:1e:9b:07:8a:05:80:e2:dd:be:1e:8a:fd:15:33:6d:07:12:
8a:12:04:f1:45:94:96:dd:79:29:8a:ab:b3:4d:ec:9d:0e:c7:
a0:d0:df:a8:6a:80:56:99:67:2e:63:33:c6:5c:c6:52:e5:a1:
d5:93:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:48 2025 by rpki-client