Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: rSQaQ3uQpn5RM013hmXnBFMcDbXS2ZauEBr1xje4Fus=
Subject key identifier: 17:7E:8A:07:DC:52:D8:81:9A:BE:ED:DB:1B:DD:4C:D4:26:C4:A6:B4
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019849D30689C7B1471BA6F7D85FD59CD54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:23 +0000
Manifest this update: Sun 27 Jul 2025 03:00:23 +0000
Manifest next update: Mon 28 Jul 2025 03:00:23 +0000
Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=)
2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 1WMEOpr/xDBXy7pCluVgYu19taitKa0i2BMNO4uIjzs=)
3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:06:89:c7:b1:47:1b:a6:f7:d8:5f:d5:9c:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jul 27 03:00:23 2025 GMT
Not After : Jul 28 03:00:23 2025 GMT
Subject: CN=177e8a07dc52d8819abeeddb1bdd4cd426c4a6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:eb:ea:73:46:56:bd:ee:f4:9b:58:39:f8:
e6:a6:12:91:39:bb:91:ad:6c:d6:23:16:18:99:c8:
c5:6e:a7:65:e0:2b:ec:86:6c:ce:35:17:1d:b3:fc:
7b:61:5c:42:50:62:a2:4d:44:bd:77:6a:e6:c4:41:
03:04:83:e1:8d:19:8d:46:b1:86:a0:6d:03:b8:99:
28:6b:d3:41:77:4c:ee:ea:63:43:06:f7:aa:9b:e1:
c2:d0:bc:32:ce:8b:85:65:52:6f:19:67:7b:84:13:
eb:c2:33:90:22:9c:9b:52:3e:55:db:51:e5:76:e7:
9c:b8:01:3d:17:e4:f1:bd:d8:ad:9a:ca:7f:71:2e:
9f:69:72:62:ac:54:c3:55:31:92:9b:6f:67:8e:43:
13:91:c9:b7:3c:71:d2:1e:42:11:65:8a:40:b0:dd:
38:d1:b2:6b:40:05:f0:33:38:5f:0e:3a:a0:e9:a9:
31:4c:c7:17:df:ba:2c:fa:85:67:1d:b5:0c:85:14:
75:ee:2c:b8:38:3a:2e:75:15:b3:b3:ad:63:3c:c4:
d7:fe:f1:5c:41:a6:1e:86:93:52:ef:11:61:a9:3c:
5b:88:86:ea:59:1b:7d:b5:be:e5:bf:1c:0f:3f:db:
10:02:df:1b:08:06:ba:78:79:1f:57:b3:29:46:6d:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:8A:07:DC:52:D8:81:9A:BE:ED:DB:1B:DD:4C:D4:26:C4:A6:B4
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:15:fc:77:73:93:b0:fa:8b:54:6f:aa:72:9f:1c:71:39:71:
34:22:7f:d7:a0:06:65:dd:44:98:31:22:e2:35:16:55:60:a0:
7d:16:cd:13:6d:96:34:1c:f5:87:71:e8:ab:0e:1b:a6:1e:21:
82:18:46:20:35:eb:c0:dd:d4:9e:72:04:e0:b1:85:90:63:4c:
94:97:23:e1:58:4a:87:61:84:12:36:da:97:0f:cb:33:82:e7:
5c:a1:e8:ea:b3:4a:a6:13:24:fc:c4:84:f4:6e:2a:3b:d5:22:
6b:84:05:c9:04:7a:1f:10:02:bb:34:ed:6c:d4:c7:97:4b:55:
13:68:6c:2f:ac:03:41:4f:66:d0:37:ad:42:09:de:33:48:48:
45:13:d9:b7:d6:88:8f:10:b8:a3:9b:70:ec:e3:ad:0d:5e:2b:
7b:e7:5c:de:f1:3d:39:a6:fe:d3:2e:dc:fa:d7:38:fd:60:f4:
18:7b:26:90:ce:d2:b2:bd:48:35:ea:41:98:f3:b6:9c:0a:9f:
d2:11:c1:05:ae:92:44:64:a2:66:0f:d0:7f:f8:59:7e:e5:e5:
51:df:01:1c:f5:8b:87:f8:91:18:84:6f:5a:82:0a:6b:cd:1b:
0a:7b:9e:ff:fe:13:d0:3d:5d:18:19:f2:b7:07:1d:e1:57:56:
d1:de:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:43 2025 by rpki-client