Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 6Hbknm6TrvTTRrSRK3zD+9WPyDtwHmoMabdTvxxem3E=
Subject key identifier: 7E:C3:90:C7:48:02:EA:C3:F3:E9:10:43:6C:CF:90:D0:A3:89:E1:B4
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019847772CA083FD8F8E307FC26DE189CB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0352
Signing time: Sat 26 Jul 2025 16:00:49 +0000
Manifest this update: Sat 26 Jul 2025 16:00:49 +0000
Manifest next update: Sun 27 Jul 2025 16:00:49 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: E0yVy2FLJmelQ/U7ahVGbgw2t+GSjKAqDei0O0EP8Bg=)
2: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (hash: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:2c:a0:83:fd:8f:8e:30:7f:c2:6d:e1:89:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Jul 26 16:00:49 2025 GMT
Not After : Jul 27 16:00:49 2025 GMT
Subject: CN=7ec390c74802eac3f3e910436ccf90d0a389e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:11:7c:a4:0b:9e:06:47:63:a4:3c:d8:fc:
a8:90:fc:c5:66:08:0b:27:be:99:00:c3:3d:ae:47:
fa:0c:6f:1a:ee:de:e8:7e:87:1f:58:49:dd:6a:07:
4a:32:67:5c:69:23:75:65:26:90:1c:64:9d:8c:78:
ca:e1:c9:a8:3a:c7:91:14:40:56:c3:9a:d6:5d:1d:
cf:86:1c:36:ae:96:96:d6:7d:c3:da:44:5b:e0:25:
c1:46:df:45:20:c8:cd:f9:54:80:22:c6:42:19:08:
c6:ea:a5:9d:a8:68:ec:61:81:45:80:d4:dd:8c:19:
46:78:49:7e:ea:21:d7:a7:2e:90:d2:30:62:46:5e:
3c:eb:32:99:f8:8c:f2:4f:de:4e:b6:9a:bd:5d:36:
15:ac:5c:e8:4d:38:c0:36:6e:6d:09:6c:8d:04:97:
62:38:2b:f5:90:a5:1c:24:e3:e3:16:7f:75:22:d3:
ba:10:27:66:38:13:bb:a1:6c:30:cc:37:d4:4e:6b:
ec:0d:24:f9:e3:1d:63:70:0d:f1:98:1a:3d:04:ba:
52:c6:f9:4e:c9:dc:6a:be:d7:41:74:8d:7a:ff:93:
ad:a3:aa:83:31:ee:a2:7d:b7:d2:80:24:c3:af:dc:
4a:58:ff:dd:9c:d6:fd:6f:67:44:e1:61:09:8b:28:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:90:C7:48:02:EA:C3:F3:E9:10:43:6C:CF:90:D0:A3:89:E1:B4
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c6:38:07:64:23:00:1d:d1:68:34:b2:49:a0:38:50:cc:c0:
da:c9:e3:af:0f:af:48:18:ca:58:21:8e:a7:a4:02:82:ae:e8:
20:3c:15:67:dd:26:fc:79:ce:2a:83:66:71:78:b7:36:bd:72:
13:19:c5:93:fd:e1:d6:fb:b8:e6:23:78:05:9d:73:fe:c6:43:
12:ee:3f:c6:c3:20:ec:4c:ef:9d:de:62:cc:ec:23:74:34:cb:
e3:a3:09:39:78:59:5c:15:51:d5:59:17:7f:e3:18:4b:f4:32:
a1:44:68:f6:93:a2:b7:77:e8:fd:57:ca:43:d8:7f:79:45:70:
00:fc:2a:aa:15:91:53:f3:e7:4c:09:98:79:99:45:82:fe:ae:
f9:da:c6:39:1d:d0:69:cd:da:13:5a:2d:a7:f2:8e:65:19:da:
eb:82:2b:32:5b:f0:f5:4e:13:d4:af:02:b6:11:b2:60:5f:eb:
61:7a:69:82:71:81:68:5c:12:e0:ec:93:8e:c1:d4:b2:30:9c:
b4:f7:47:87:2c:ee:cc:02:ba:81:1b:76:59:eb:d3:53:a8:54:
af:d4:0f:c8:98:1c:21:89:fe:8a:6b:1a:ae:15:5f:57:f7:8b:
df:1b:f1:d0:aa:f0:ca:a5:59:18:a4:40:10:d2:8c:6d:98:90:
8c:82:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:02 2025 by rpki-client