Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: 13FnhAui3Lfsnrr1cuXoxl++rFH9vQSk/rAaiATN8uo=
Subject key identifier: 63:CD:F4:C6:E5:65:BB:86:87:85:F6:CE:27:1B:65:C2:3C:8E:99:EB
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 01983FBE630D8129022D32EC6A5BC4713A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0FF7
Signing time: Fri 25 Jul 2025 04:01:38 +0000
Manifest this update: Fri 25 Jul 2025 04:01:38 +0000
Manifest next update: Sat 26 Jul 2025 04:01:38 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: qMSCasWhzm9Jy6TJzGAE6GFMde5E1eP8UniJv7E/2Kw=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:63:0d:81:29:02:2d:32:ec:6a:5b:c4:71:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Jul 25 04:01:38 2025 GMT
Not After : Jul 26 04:01:38 2025 GMT
Subject: CN=63cdf4c6e565bb868785f6ce271b65c23c8e99eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:b6:c6:04:78:6a:42:db:1a:42:a7:07:44:
70:47:3e:b4:38:2c:24:de:6d:c8:10:eb:46:26:cd:
85:13:70:ce:2e:10:bb:cb:22:4f:32:24:3f:38:d9:
ab:0e:20:72:a2:ed:25:e3:cc:9d:c3:f5:d5:1c:cd:
5e:1d:94:a4:4c:04:6c:27:5a:be:af:b5:fd:a8:f3:
48:cf:be:2f:8a:b5:db:25:ae:b4:90:04:bc:cc:f7:
41:05:04:aa:54:6a:b0:d7:9a:a0:cf:d3:f0:f4:e5:
15:46:30:db:d4:fa:69:cd:48:b9:b2:bd:ad:e0:a2:
06:ae:7f:53:39:be:ea:0c:a8:31:ff:2e:b8:d1:49:
a8:4d:76:db:72:fa:b0:04:18:0e:70:10:8c:63:65:
c6:bc:02:5e:72:8e:82:67:d1:45:9d:de:9c:b9:f0:
8b:cc:37:01:08:43:88:c4:c3:91:93:1b:8f:04:95:
a0:ff:59:14:e4:92:08:1d:c5:da:6e:3b:7d:76:a6:
e5:7c:c1:5c:4d:22:68:d8:82:37:f3:c9:6f:c5:c9:
1c:a1:02:ac:7b:8f:fa:80:b2:bd:5d:05:03:3f:f2:
c4:1b:77:89:09:83:6b:7c:8e:68:10:53:72:93:e0:
84:91:58:8c:6e:b3:77:c9:ce:c4:55:00:2e:5e:44:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:F4:C6:E5:65:BB:86:87:85:F6:CE:27:1B:65:C2:3C:8E:99:EB
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:d5:18:43:f2:a5:97:53:3a:06:d0:84:39:ce:6f:ae:99:
04:98:4b:ab:f5:b6:79:4a:1e:b7:b7:0c:89:39:ba:d1:f7:8f:
89:98:8c:48:0e:93:d4:4f:f7:43:af:6f:23:84:05:92:0e:05:
93:5d:b6:db:30:84:6f:55:ce:95:8c:cf:a9:b7:0d:8d:62:a0:
05:57:7d:a8:bd:cb:21:59:fd:5f:ef:86:f4:16:04:10:0b:54:
da:8f:a8:f7:aa:b8:c2:8d:3b:2e:c0:71:30:35:7b:3c:b1:c3:
fd:ec:4a:44:67:f7:81:dd:64:fb:39:f2:ae:b4:45:b3:05:84:
13:c4:3c:af:91:43:7f:a7:d8:78:b6:25:93:e3:8d:4d:20:3f:
4e:d7:0c:77:22:46:92:1a:eb:ea:51:7b:28:b0:cd:16:79:c9:
79:d1:32:97:97:f6:e2:89:ab:34:94:7d:9e:61:4b:7f:53:21:
31:e0:ec:fe:6f:eb:ea:6c:fd:c1:01:2b:64:07:42:bb:12:e1:
a8:8d:fa:bf:2b:eb:a1:19:5a:8e:09:32:1d:89:e0:53:f9:81:
06:fa:79:9e:14:49:f8:da:52:cc:1b:6f:67:02:9d:93:b8:99:
46:fe:e2:cb:1f:ee:a0:0f:96:ac:3b:8a:e2:0f:2f:1b:b5:c5:
5a:05:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:53 2025 by rpki-client