Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: 2L8wOYDGLHpeM/DepW06zARLRs/LEZ22p2QEbDXI+LY=
Subject key identifier: 3D:91:35:6C:32:20:8F:FC:39:82:35:42:0A:BA:87:7E:1B:E3:8A:78
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019827B51531998511AC2982E6708204AF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 15EF
Signing time: Sun 20 Jul 2025 12:00:35 +0000
Manifest this update: Sun 20 Jul 2025 12:00:35 +0000
Manifest next update: Mon 21 Jul 2025 12:00:35 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: pE0hTLadY1PxTQvWu3kGJ9G4rMvlAMukgxWqq6EjFd0=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:15:31:99:85:11:ac:29:82:e6:70:82:04:af:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jul 20 12:00:35 2025 GMT
Not After : Jul 21 12:00:35 2025 GMT
Subject: CN=3d91356c32208ffc398235420aba877e1be38a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:94:4e:6e:a5:d9:49:d7:01:52:05:c0:82:
72:ba:b4:25:9d:fe:5c:7c:50:71:9a:92:bf:dc:86:
9a:ee:b2:99:03:10:81:94:19:18:1d:61:53:f3:f0:
5a:b9:0c:db:cd:5b:e3:9e:6b:e3:0b:8f:fe:57:e7:
3d:5e:c6:74:ef:bf:4f:d3:2a:0a:05:e7:bb:9d:7e:
92:74:d6:79:e3:47:f3:84:08:03:45:fc:15:e3:4e:
2e:f6:99:5c:7d:a3:47:42:16:5b:ed:5c:36:bd:1c:
27:e2:2c:46:af:6d:a8:92:83:f9:31:26:f1:0d:07:
75:38:f0:51:92:a0:81:18:17:3e:fe:35:66:bf:ca:
a4:09:d2:73:fe:3e:e2:e6:86:a3:9b:ed:40:96:c0:
ed:64:59:80:e1:9d:d9:a8:3d:ef:fc:f9:9c:5b:48:
b1:7d:b3:f2:80:ce:aa:c0:e5:29:41:d0:c8:24:bf:
10:5f:f4:88:63:0d:cb:38:e8:fa:9d:3d:c4:f7:ef:
bb:2c:38:a1:fd:64:82:2b:c5:f9:1a:9d:2b:03:66:
bb:b3:53:fe:07:7b:46:db:38:8d:82:b8:f2:9f:e5:
71:1c:5f:21:38:79:ed:30:20:7e:e4:1c:f3:74:7b:
73:89:6c:12:02:f2:e8:94:48:62:03:8b:6c:c7:60:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:35:6C:32:20:8F:FC:39:82:35:42:0A:BA:87:7E:1B:E3:8A:78
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:66:10:0a:1f:08:25:0b:64:83:6f:d2:2f:b3:04:6f:03:
78:60:f9:06:03:d1:87:96:e8:55:9d:55:63:d7:47:10:50:5f:
c0:0e:ab:40:a8:0b:ce:d2:00:5a:66:8d:27:70:08:33:54:4d:
e8:7f:aa:f3:15:25:07:a1:f9:ce:69:0c:1f:56:cf:c9:2a:a8:
a3:65:1d:b5:fd:9b:f2:41:6b:29:e6:68:31:09:f5:7a:42:00:
b5:9f:e5:f9:85:d6:2c:2b:86:7d:53:c4:21:ce:a5:f4:f4:18:
9f:7c:4b:6c:e7:5e:15:cb:a6:0b:65:79:c9:c3:48:2f:54:dc:
5b:7e:39:1b:44:a1:5f:fc:82:04:bb:d4:8c:ec:5b:11:36:7d:
50:28:95:73:55:6a:4b:1c:98:be:18:f1:0c:85:7f:6d:6e:55:
b0:90:6f:33:85:f0:54:99:1e:90:d9:11:4e:0f:2a:35:50:8f:
6e:d0:81:91:55:0c:b5:7c:08:f3:1e:a6:1f:1e:f5:a3:3b:7e:
ac:ec:8a:cd:ca:ba:3a:56:f7:d6:f2:b1:56:d3:44:4e:76:0d:
22:ea:17:38:ba:d4:c0:00:28:26:8e:d3:db:c8:89:13:34:62:
41:52:c4:d4:81:b2:a4:3c:ee:f8:30:ad:f1:22:bc:0c:5f:8e:
de:5a:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:27:11 2025 by rpki-client