Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: U8ZMjEKKWHrYXvYioGPg3ViiMcRLe+yoJmND1ooDzj4=
Subject key identifier: 6C:B8:44:DC:8C:AB:F4:1B:19:25:EF:1A:37:BA:A7:B7:88:BD:DE:A1
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 01991808F776DDF069634D13A153708DBCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:04 +0000
Manifest this update: Fri 05 Sep 2025 04:01:04 +0000
Manifest next update: Sat 06 Sep 2025 04:01:04 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: OEQcBy33JRul0vpPSS9b7x5l/9MpJBLkMRfCIq2gWcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:f7:76:dd:f0:69:63:4d:13:a1:53:70:8d:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Sep 5 04:01:04 2025 GMT
Not After : Sep 6 04:01:04 2025 GMT
Subject: CN=6cb844dc8cabf41b1925ef1a37baa7b788bddea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:ec:8d:97:34:29:d0:3b:7e:fb:61:b7:c2:
6e:67:0c:b4:53:f9:31:0e:c6:b6:c9:60:77:a4:62:
8a:0a:58:68:d4:c3:7a:7c:e9:00:66:2a:82:63:c9:
d5:32:77:f3:a3:8f:cf:71:3c:e4:ee:d8:ad:52:82:
b8:ba:88:a0:d9:4a:df:bf:d1:a5:47:f5:8e:f5:0a:
a4:84:86:26:ca:23:4b:37:62:76:ab:86:e6:80:10:
66:7f:68:ff:cf:9c:03:cf:b9:88:58:b4:1c:62:ae:
a3:e3:45:74:ce:60:4b:5d:81:ee:0d:58:7f:5a:d1:
85:f8:06:d1:83:5a:f3:5a:02:9c:d2:63:d6:e8:90:
da:75:d8:68:8c:e2:36:f4:ca:0c:87:dc:cf:5a:ca:
5d:a0:dd:b2:27:f0:fc:26:b4:f9:fc:77:a6:7a:19:
a9:69:e2:e6:71:2e:af:39:fc:cd:a2:64:a4:8a:1f:
52:5b:68:11:a5:39:f7:de:b0:fb:e1:9e:c8:06:64:
ef:e2:3a:88:f7:b7:12:2f:ec:eb:77:7b:9d:07:ba:
26:fb:2d:2a:a0:58:47:e8:4b:78:01:bd:cd:77:fb:
d6:10:6c:88:a7:b0:5e:5a:66:96:8c:f2:19:1f:7c:
67:84:83:0a:ed:f1:e8:cc:6e:11:bb:9f:18:27:98:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:44:DC:8C:AB:F4:1B:19:25:EF:1A:37:BA:A7:B7:88:BD:DE:A1
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ec:51:98:81:5d:25:ca:eb:91:5a:3b:bd:48:e9:d4:75:5b:
a6:b9:ce:2f:0f:5a:7d:c8:c8:f4:76:ff:17:10:77:3f:fa:03:
d4:65:8b:e6:01:2b:74:84:57:14:05:20:55:be:08:d1:79:c0:
fb:a6:f7:70:77:2c:05:13:ce:b2:83:0f:d3:a1:a6:a1:bc:94:
b5:16:cf:09:40:08:81:1c:7d:90:a2:71:3c:db:b9:68:41:42:
0d:73:ef:ea:ed:95:a8:19:13:bd:1f:1b:67:d2:38:c6:51:1d:
e4:6c:d1:66:e8:70:c3:11:bc:fb:30:14:eb:9f:70:38:27:4e:
0d:3f:89:b8:4f:54:e9:7d:ac:52:d5:70:73:1c:5b:bb:42:33:
aa:99:e0:0c:67:b4:8d:8f:22:4b:19:cd:36:fe:3d:e8:b7:4d:
b2:3d:4b:f4:60:d0:86:8b:b1:c7:1e:c8:3a:0a:ff:55:39:37:
78:09:a3:b2:a0:b5:87:51:a1:8a:6b:21:d9:a8:89:17:4a:26:
96:39:01:05:f7:0e:53:62:34:21:c8:c7:30:15:41:07:30:15:
5f:d0:36:d8:8a:f8:9c:55:cc:f7:6c:58:75:e1:b1:7a:b3:95:
ac:16:1c:d7:42:0a:68:f0:94:cd:48:bf:4c:8a:f4:bd:0b:e1:
61:f4:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:14 2025 by rpki-client