Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: CF4aS49PLthYr4OyYPhp5nKyc6EXhlz2oJjtyTuTI7w=
Subject key identifier: 65:34:B8:37:D9:1A:76:BA:2C:E8:08:1B:E9:AC:35:00:BF:F7:3B:84
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01984A417EED953DC217459DF1EDF755E9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0584
Signing time: Sun 27 Jul 2025 05:01:02 +0000
Manifest this update: Sun 27 Jul 2025 05:01:02 +0000
Manifest next update: Mon 28 Jul 2025 05:01:02 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: yhNyCooN3CvYyvU3ZkxW2FvEBcEdknesR3w7qOJz5nw=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7e:ed:95:3d:c2:17:45:9d:f1:ed:f7:55:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jul 27 05:01:02 2025 GMT
Not After : Jul 28 05:01:02 2025 GMT
Subject: CN=6534b837d91a76ba2ce8081be9ac3500bff73b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:38:ba:5f:9a:47:39:b6:7b:25:23:3e:62:
53:53:cc:f6:3d:f9:58:ec:3e:d7:91:17:51:08:5e:
e5:19:69:15:be:af:53:c3:7e:37:e2:76:d9:cc:15:
09:ff:e6:21:53:80:2d:6e:01:30:01:ea:df:b0:f1:
eb:9e:5e:66:aa:98:d5:94:f0:b3:e6:32:56:3a:9e:
01:e8:9e:54:28:76:e1:f5:96:98:8a:c9:b8:05:fc:
dc:c4:93:cd:61:9e:ba:ea:60:35:9f:3b:71:e4:0f:
cb:19:ad:41:19:c7:68:07:5a:22:46:ef:50:c0:eb:
c4:59:6b:b4:66:f5:37:9f:5b:b1:94:5c:e6:e7:34:
da:69:af:a5:3b:c8:1c:6d:a2:90:14:63:cb:41:09:
b2:22:9a:28:4e:27:2e:00:a3:68:e3:65:f6:d0:43:
02:c0:05:41:00:e6:e7:2e:b7:5a:a2:24:8f:85:45:
df:d3:fb:db:71:1e:e5:1c:b0:be:90:78:15:a5:6f:
fa:0a:6c:f6:5e:0a:12:49:6f:99:c4:0c:ed:24:77:
21:0f:ec:4e:0f:41:d1:68:1f:7b:c0:c9:2d:61:98:
ca:de:e7:59:f0:cb:5a:c2:86:ec:87:39:d1:bb:e0:
08:c3:15:24:24:92:e1:c6:c6:5b:d2:30:63:17:3a:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:B8:37:D9:1A:76:BA:2C:E8:08:1B:E9:AC:35:00:BF:F7:3B:84
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9e:2f:f2:75:79:a4:db:42:08:26:c4:ba:f2:7f:e1:7a:97:
63:c6:55:31:95:fb:02:8a:49:3d:0a:48:e6:6b:c7:7b:45:6c:
78:74:1d:21:0c:ee:5e:d1:54:63:e8:8d:99:b7:f1:de:1f:fc:
23:5c:4f:f2:87:bf:22:4f:be:59:7f:43:8e:c5:a8:9d:d1:e6:
a6:19:ce:2b:d6:e1:9e:08:62:d8:ed:82:0e:46:ee:09:c5:55:
3d:44:44:6e:d6:4b:99:86:3d:74:30:4d:2e:2d:ee:45:62:60:
1d:4e:ca:18:83:f8:22:63:74:c7:cb:8d:01:97:2c:55:09:bc:
48:e8:2c:09:66:18:7a:18:f4:9b:43:87:79:f9:10:e0:6f:de:
9c:28:b3:74:97:ec:58:1c:fc:ef:f1:69:32:1a:1f:f3:0a:33:
c4:b7:1d:ce:80:fc:93:e5:f8:01:f0:ec:0a:6f:82:79:0b:77:
86:86:21:f9:b9:f7:a0:cb:d1:bf:6e:7f:bf:5c:c1:70:a8:f5:
5a:39:e5:60:de:f0:3d:88:9a:33:6b:dc:20:6c:3c:87:d3:17:
56:57:7c:15:a4:02:d1:e9:c2:07:9c:96:99:d7:05:4d:bc:06:
69:23:ad:d8:35:be:be:47:db:e0:0d:08:00:fc:0c:03:89:19:
b8:39:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:43 2025 by rpki-client