
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: AG30WgeMC5rr21OaCCKVK6qE7+QwFH6DlV4ut3dI3ZQ=
Subject key identifier: 6A:23:E5:3B:42:3D:FE:AE:E9:0B:24:41:4A:EF:2B:54:F2:90:52:3C
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019845890079B8335C9220EA222AE69E6340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 11C6
Signing time: Sat 26 Jul 2025 07:01:03 +0000
Manifest this update: Sat 26 Jul 2025 07:01:03 +0000
Manifest next update: Sun 27 Jul 2025 07:01:03 +0000
Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: OAnmQh0UhenzStpPsrrR++l+jeZnL6bthZMSTb2GalI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:00:79:b8:33:5c:92:20:ea:22:2a:e6:9e:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Jul 26 07:01:03 2025 GMT
Not After : Jul 27 07:01:03 2025 GMT
Subject: CN=6a23e53b423dfeaee90b24414aef2b54f290523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:30:f7:16:fa:fd:b7:89:df:49:42:56:8f:
6e:68:01:0d:67:95:60:74:36:43:8a:83:94:f9:c1:
5f:cb:73:0f:31:cf:a9:73:9b:7d:8b:9e:fa:1a:fe:
82:93:c0:af:8d:af:60:cb:50:1c:da:d3:5f:cb:96:
42:15:96:65:68:8f:72:dd:ec:1e:f6:47:3e:af:cf:
9d:75:ce:2f:5b:b6:66:bd:8c:0b:d8:fd:e8:9f:85:
cb:52:80:11:f6:8d:06:af:b2:da:4c:eb:d2:01:de:
4a:60:e8:a6:e0:e2:28:e9:90:f4:ce:04:ba:e4:94:
88:4b:6a:d7:bf:4e:da:48:3b:1f:84:c3:36:23:e6:
5f:df:ad:58:8e:a1:a0:af:f5:c0:b8:a0:91:a7:76:
db:d7:53:fd:d3:cf:5e:ab:a0:78:6a:06:6d:fb:55:
65:55:cd:5d:87:1e:1e:c7:76:2d:ff:46:fa:fe:92:
fd:89:55:e4:91:78:a6:47:b4:16:3b:f3:d6:dc:31:
b4:cb:bd:8c:90:49:80:5e:3a:0b:b3:0d:aa:28:b4:
52:f6:c8:f1:05:76:f7:cd:bd:6c:5c:36:2f:e3:47:
ad:09:2f:7c:7c:36:42:6b:b0:f9:d0:2d:d7:23:35:
3d:61:15:66:c2:2e:22:53:f8:c1:0e:c3:56:12:60:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:E5:3B:42:3D:FE:AE:E9:0B:24:41:4A:EF:2B:54:F2:90:52:3C
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:e2:89:21:44:ce:a0:0f:1f:30:e1:2e:3b:44:0a:df:ba:
09:fa:6d:15:82:18:b0:2b:9b:b3:d8:03:3c:fc:c3:9e:64:b8:
d4:66:e8:21:f0:7e:4a:14:14:36:04:33:7e:64:ee:10:60:e3:
a1:66:d4:7b:c8:51:de:25:60:6f:98:05:a3:06:1e:cf:78:48:
7e:b1:57:0b:a4:b7:9f:8d:54:3c:b0:3b:99:97:8e:94:5e:38:
75:3a:ca:be:2c:99:35:e1:82:76:e1:bb:49:b9:96:4a:d5:e0:
63:d0:11:d3:06:40:64:78:61:78:d9:bc:4c:de:94:44:c1:84:
79:02:f6:03:89:5a:04:5e:7b:b3:76:2d:28:db:4d:82:db:69:
71:d0:f3:51:af:5e:e8:5e:74:a7:01:5a:8b:48:4b:59:ad:0b:
0b:1c:88:87:3e:00:11:bc:c6:68:58:05:92:46:a1:b6:0d:8a:
c4:76:81:1d:e2:15:ea:64:29:ad:18:ac:45:66:0e:e0:f4:c3:
3a:f9:b6:69:bf:1b:eb:86:ee:82:7c:57:de:e5:97:c9:3a:34:
8e:95:6e:95:c8:33:9a:1f:d6:02:83:85:3b:9d:f3:f0:1f:b4:
4b:30:dd:97:21:42:60:3f:a2:36:fa:8c:47:03:27:9e:73:01:
4c:da:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:03 2025 by rpki-client