Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: +LJpOoQXRn3hyf1XhUOzo5kLpfx6Rr9i1ERaCXh+Nso=
Subject key identifier: D9:38:88:BC:5D:16:9B:2D:A0:23:CD:EF:A1:25:4B:37:D6:56:70:0C
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019855691DE0CC959921C3B81F8965B4F8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 09:00:08 +0000
Manifest this update: Tue 29 Jul 2025 09:00:08 +0000
Manifest next update: Wed 30 Jul 2025 09:00:08 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: txN8GzgE9U+rh23tBDVk5lBIYcJFjWP0do+M2Chc9Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:1d:e0:cc:95:99:21:c3:b8:1f:89:65:b4:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Jul 29 09:00:08 2025 GMT
Not After : Jul 30 09:00:08 2025 GMT
Subject: CN=d93888bc5d169b2da023cdefa1254b37d656700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:1a:5b:54:86:37:30:3e:15:ba:2e:a7:af:
3f:29:33:2b:9e:d7:74:fc:98:3c:ba:5a:38:0a:6e:
43:28:45:f0:df:f0:59:df:b6:26:c2:c0:f8:52:2c:
bd:7d:88:13:0f:ff:1c:4d:be:54:b2:30:25:71:a2:
8e:44:e6:3d:58:9f:e6:08:2c:71:5a:ec:f8:27:11:
fb:a6:c8:3d:90:93:0e:fa:a3:47:c1:8c:c4:ae:b2:
59:7b:19:e7:03:e0:fa:a3:c7:0b:9d:44:67:3d:cf:
e4:54:59:0b:ec:cd:a2:0f:e6:20:1a:87:6f:6a:e7:
5e:31:fc:c7:fa:ce:b7:da:ea:a7:41:8e:76:70:ef:
60:90:53:04:b1:8d:9e:e0:02:c0:89:ba:e5:8c:e6:
91:83:99:c0:49:0a:e1:88:8c:e9:26:00:d0:84:1f:
61:97:33:7c:79:03:4c:99:69:80:90:1c:90:df:f3:
9b:a6:00:6f:bc:13:f7:df:80:9d:1f:1d:cd:fd:4c:
00:41:84:af:a1:d9:98:b6:02:23:47:84:29:7a:7f:
c9:af:ba:2d:35:cb:d4:5d:e6:d2:ad:9e:4e:97:c6:
86:71:68:22:cf:a4:df:61:cf:83:88:59:03:20:d9:
79:c3:c2:4b:90:1a:e8:5a:e1:35:54:e6:3e:4c:03:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:38:88:BC:5D:16:9B:2D:A0:23:CD:EF:A1:25:4B:37:D6:56:70:0C
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:33:c6:f5:fb:7a:ca:26:4c:28:01:73:7f:58:4e:82:1e:
5e:f0:df:11:b2:07:6f:16:68:22:7e:39:14:fa:d3:23:15:d9:
76:5e:fe:94:14:d0:d0:67:27:4a:19:ef:bd:c1:51:b7:1b:63:
ea:bd:23:c7:79:3c:e2:b8:9e:32:3a:24:5b:60:26:c5:90:d0:
62:cb:15:db:68:6e:58:d7:77:ef:9e:1b:80:fa:11:c9:9f:6a:
f1:32:86:f3:21:35:f1:57:97:ec:41:f8:91:09:f4:c4:ac:35:
db:b1:cb:f4:43:2b:1a:f3:ad:fc:13:7a:ce:1e:41:61:01:1f:
27:38:28:a4:66:3b:f0:e0:4d:f4:62:a3:85:78:f8:e4:c0:74:
0a:5b:c3:0b:b1:ad:2f:53:98:be:a8:77:64:09:15:5c:45:f5:
6b:a1:cd:51:53:cd:9a:ea:17:47:9a:66:00:66:ce:c6:d5:e8:
99:1c:5f:d8:72:a1:13:1c:37:b2:2c:80:8d:6e:74:42:b7:c3:
33:ef:be:8d:2c:e9:c3:d5:b2:d0:e8:ce:c9:5f:21:11:70:c3:
a5:c9:2b:21:88:03:19:a6:27:8a:d1:bf:be:98:38:bf:d4:bb:
e8:52:35:60:6d:36:08:27:db:3e:d5:5d:c4:66:17:50:2a:14:
94:5d:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:53:01 2025 by rpki-client