Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: zJfefpv6vSxcYzrQ8VGEjc/oL7niH8aWZvYmfa+vE8k=
Subject key identifier: C0:AE:79:AE:D1:09:CF:AF:7E:37:15:05:A2:8F:1C:22:84:59:4F:95
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019844AC75BE1187ACF81BC775950C39059D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 03:00:09 +0000
Manifest this update: Sat 26 Jul 2025 03:00:09 +0000
Manifest next update: Sun 27 Jul 2025 03:00:09 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: AgK6nAHymQzdraM4ZQvT7HRHGvCjizRj+cAlWFb5a0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:75:be:11:87:ac:f8:1b:c7:75:95:0c:39:05:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Jul 26 03:00:09 2025 GMT
Not After : Jul 27 03:00:09 2025 GMT
Subject: CN=c0ae79aed109cfaf7e371505a28f1c2284594f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:9d:88:12:ce:fb:73:67:cf:a0:23:bf:d7:
e2:ca:1e:58:40:ae:73:54:4c:9a:e5:21:c0:6f:40:
ef:a5:14:66:99:df:d3:da:6e:b8:ca:a8:4b:d2:3c:
2a:f4:da:da:4d:85:d6:fa:aa:7b:2c:5e:7e:5b:bc:
69:a0:eb:28:30:a9:9f:03:99:6c:7c:de:b1:a4:c9:
08:e7:31:a1:d7:69:7e:3c:85:96:76:10:f7:0d:72:
6b:b2:3f:fc:b3:fd:f2:b8:83:48:1b:c7:fd:12:b8:
65:77:36:9a:21:fb:be:dc:55:f7:ab:ac:b6:e3:e9:
e5:1b:78:a8:ec:c3:53:4a:e4:dc:83:a6:7b:0e:4b:
09:79:7f:09:0f:3a:e5:f3:87:db:db:9d:49:c6:c8:
43:8b:ea:8b:91:ac:65:be:21:a5:db:1e:3f:07:62:
3d:c5:de:9e:72:61:53:a8:fb:56:ca:dd:d6:d9:aa:
ef:65:81:51:c9:80:96:db:20:63:2a:53:1a:e0:d3:
1c:34:5a:22:4a:4a:84:3a:f2:f0:ef:0b:55:f1:f9:
d5:c1:78:9c:93:29:e8:3d:68:60:d5:e8:10:c4:7b:
5d:11:f4:46:6f:c7:5a:36:b2:f3:96:d1:c3:7f:7c:
b9:7f:86:94:73:23:a0:9a:ee:05:e9:b6:67:21:1d:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:79:AE:D1:09:CF:AF:7E:37:15:05:A2:8F:1C:22:84:59:4F:95
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:06:af:69:56:2f:20:b5:6d:cb:36:9b:37:f5:39:b0:79:ce:
6b:50:72:74:bb:fa:9a:b9:21:f9:7d:fd:20:42:c9:c7:27:38:
d8:cf:e1:9f:71:d0:cf:75:02:85:34:4c:5c:cf:db:29:98:2f:
5e:6a:de:75:2c:58:59:17:07:1f:40:41:1b:b5:1b:19:42:00:
e1:ac:1f:70:56:44:b5:d2:b8:c7:03:64:b8:f4:0a:d0:17:7d:
dc:d8:72:a2:73:b2:2c:9b:74:4d:6a:85:ac:91:94:1f:c1:c0:
3b:36:29:e9:87:d7:ea:7c:fd:82:f8:77:1e:a5:15:c5:4e:b2:
14:13:2d:da:1e:4e:68:be:36:71:d4:e4:89:83:40:60:f3:91:
6b:fb:f4:de:9d:ef:22:45:dd:29:95:04:1c:31:c3:bf:e0:ef:
d9:18:31:66:30:b1:b1:1d:5c:f7:e2:32:8f:5c:13:e9:62:6c:
db:62:74:cd:98:b0:cb:0d:f9:6a:7f:01:7d:b7:82:b2:c6:2b:
f3:4d:a2:95:c5:5a:38:f1:45:2f:ab:7c:bb:48:ca:86:6b:01:
91:8a:02:6c:d6:d6:4f:48:9c:88:86:5e:73:65:77:03:3c:8a:
6d:5e:24:1a:b3:c2:96:61:5c:d1:08:59:8d:01:29:25:59:d3:
cf:c4:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:24:13 2025 by rpki-client