Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: jZZbXNmC1L9jYkSwjW0sUYNdvRaszTZHel0ZqV5xHZs=
Subject key identifier: 53:3F:3F:10:68:40:0E:2A:F9:98:B3:74:17:51:84:00:0D:CB:03:54
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0198462D07B133680EEAE3215509C296E010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1610
Signing time: Sat 26 Jul 2025 10:00:12 +0000
Manifest this update: Sat 26 Jul 2025 10:00:12 +0000
Manifest next update: Sun 27 Jul 2025 10:00:12 +0000
Files and hashes: 1: 1F9MijuQpgadBC0qomGmUYJZ8Qo.roa (hash: +dDzScNaK5jHBDGWnNSKAKH4zr9szjlmXCKJdH9h2oE=)
2: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
3: bDiIn-_UXIGuw3Qo4clxFIKAqAE.roa (hash: rYwZ+l52WfQynuoiZucorfpRFkeDzJfCrE/NRMJMIic=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: A0QJLBCzDorEXn+gfTPWpX7l+T0GetLWWohIk3fSKKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:07:b1:33:68:0e:ea:e3:21:55:09:c2:96:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jul 26 10:00:12 2025 GMT
Not After : Jul 27 10:00:12 2025 GMT
Subject: CN=533f3f1068400e2af998b374175184000dcb0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:73:34:1e:ca:29:a2:21:80:8d:7c:e6:4b:
eb:a6:09:7a:4f:35:a5:9c:0d:b7:46:cf:de:de:e8:
46:17:3b:25:5d:f3:8a:a0:42:53:46:c1:2d:d0:72:
86:33:1d:53:4b:e3:6f:79:11:94:7b:90:9f:86:ca:
eb:d5:56:02:da:48:25:7e:86:22:e2:9e:e4:46:28:
bd:08:ac:e9:88:07:07:2f:de:67:14:ec:21:a3:54:
55:f8:80:ab:8f:a9:90:08:19:94:e5:23:91:4f:07:
d9:2c:4d:91:19:e9:ed:99:a6:d9:56:05:d3:81:17:
34:f3:b1:7e:fc:63:c8:73:7e:d3:ea:f3:cc:b7:52:
c4:59:f4:a5:42:2c:54:08:91:88:bd:b9:96:99:95:
3a:b1:9e:1b:be:87:27:d2:de:b9:28:49:62:1c:3d:
bd:5f:a3:0d:a1:9e:38:37:94:8a:5f:80:01:f7:54:
f7:6e:56:24:b4:e8:4d:db:30:08:d0:39:88:3f:56:
04:df:4b:c1:67:99:85:33:36:29:69:22:23:5d:6e:
1f:3d:9c:1d:48:ef:b7:f8:6d:4b:ad:89:95:c7:99:
f3:00:cd:19:78:54:92:33:4d:25:35:ae:17:59:f8:
f8:0f:cd:95:fa:dd:0b:b7:fa:6b:d6:d8:42:09:4a:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3F:3F:10:68:40:0E:2A:F9:98:B3:74:17:51:84:00:0D:CB:03:54
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0b:fd:e4:84:19:bf:d3:7e:4b:22:74:be:f9:1f:c0:92:62:
39:28:33:f6:17:c9:8c:46:b4:6e:ad:ae:0d:cc:fb:d1:4a:1a:
14:57:21:75:70:27:d7:43:b4:af:f0:b4:38:41:af:b2:81:5e:
a7:45:f9:78:36:35:2e:f0:93:1f:e3:28:03:85:85:65:39:6a:
42:3a:08:bd:dd:ad:85:91:31:12:ea:2f:6c:a3:b1:81:06:3e:
7c:0b:25:3e:4d:5c:0d:0b:92:e7:2b:00:b4:c4:32:96:bb:14:
c7:40:87:84:d4:91:88:04:2c:c5:da:d8:17:bf:8a:83:d6:bf:
68:d5:65:ba:6e:40:bd:93:cb:78:07:97:01:da:f4:4f:fe:b2:
da:6b:72:65:1b:55:0b:eb:66:dc:76:5f:64:45:3d:46:51:90:
73:7f:63:9d:f5:70:84:62:84:1a:1f:c1:41:cc:3c:48:c1:7c:
60:d9:fb:ea:ee:f9:8a:3f:25:98:c5:c0:37:54:65:0a:9f:6d:
63:ba:32:cc:1a:80:a6:60:2b:da:f1:cb:b8:52:30:8e:56:bb:
f7:49:97:5e:05:c5:db:41:5a:0d:10:54:7a:2a:2f:b8:27:ff:
aa:18:a4:66:68:fd:76:52:8d:71:e7:95:01:04:60:36:8b:42:
29:97:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:19 2025 by rpki-client