Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: +cHj3NObgnZVRc8XIJIT7HcTXS75aZZ6yJGekI3noFU=
Subject key identifier: 8C:B5:CA:F1:39:0A:EF:A9:4B:19:02:BD:46:04:D3:1D:4E:7E:C3:67
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 01992255DFD8B53ADD52B82291B9992ACE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: vqsz+Rkeiz9blV99hPo7bhQ/arwgpzbkgFmZkvMIqzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:df:d8:b5:3a:dd:52:b8:22:91:b9:99:2a:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=8cb5caf1390aefa94b1902bd4604d31d4e7ec367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:1a:a1:50:cd:fc:9e:00:1d:22:f9:b5:32:
e3:90:50:ec:e5:8a:7a:aa:5a:ba:20:b3:aa:20:9d:
95:90:5c:f2:d4:8c:53:4a:ac:58:4c:c0:d0:08:82:
75:9a:f9:0d:95:ce:5a:54:ed:4d:d7:e8:9d:1b:d7:
14:cb:ee:1a:27:13:55:ad:2c:4a:26:07:5f:cb:a3:
2b:9d:6c:25:b5:bc:52:a7:e6:28:95:9e:74:07:28:
5f:6b:de:8c:f8:f3:23:a0:9c:83:87:fa:ee:2d:0e:
cf:20:c0:05:f1:da:ef:87:41:3d:e3:6d:0b:51:35:
e1:35:d8:40:a8:c9:5d:c7:17:56:d6:79:24:34:fe:
bf:ee:d2:5a:d5:99:38:19:cf:61:47:c2:e2:98:9a:
b3:29:fa:55:ca:33:c7:9e:43:12:34:81:d4:59:1f:
34:6f:db:ba:b9:34:b1:48:a1:b4:d5:64:4d:ab:45:
54:24:ed:f4:01:0c:c4:b3:ae:36:4c:75:15:3b:bb:
90:56:10:d1:84:43:98:12:f9:5a:d5:6b:60:99:ec:
07:fa:f3:e8:61:76:57:a6:a8:19:ca:a6:85:44:c4:
3f:d6:b0:57:e5:e2:9b:2c:59:20:9e:03:e6:7a:63:
8c:5e:92:af:6a:c1:c8:e3:b3:89:4e:30:db:c1:83:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:CA:F1:39:0A:EF:A9:4B:19:02:BD:46:04:D3:1D:4E:7E:C3:67
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:f6:a9:2d:89:08:cb:b3:d8:b4:66:d4:6a:a1:a8:8d:c9:
7c:ab:e9:4f:48:c8:44:8b:0e:22:c0:4c:80:60:b1:ed:6f:78:
97:e9:ac:3d:13:ea:ba:90:b0:f7:ed:b1:f2:d1:ad:e1:0a:f5:
9c:01:14:f9:47:af:05:ec:8a:22:01:2f:ea:4f:23:76:81:61:
67:23:cb:75:bd:ea:95:59:ab:ab:8f:5f:67:6e:2b:41:ce:e4:
51:5d:af:7a:73:f7:59:0d:27:a5:88:2d:21:db:22:f8:81:4f:
2a:d3:32:6c:3e:51:f2:4c:08:97:4e:df:97:29:8d:49:2d:17:
33:e9:3b:e6:2d:7a:f6:c9:f4:d5:07:b2:72:91:72:73:13:03:
40:6a:f7:16:40:27:ee:69:3a:7b:d0:48:9c:4a:da:36:37:fe:
b8:8a:92:e3:56:65:c2:d8:b9:36:fa:69:a2:3e:06:f5:9e:fd:
76:38:7e:ad:2f:ec:2c:1d:6d:3d:94:62:12:48:a7:a5:f2:d3:
70:5e:d1:a7:9b:6e:c1:0a:32:de:81:c0:f1:5a:4d:4c:c1:4f:
69:0d:7c:8f:83:9e:05:2a:e7:c7:fb:44:98:18:59:a3:5d:77:
43:ce:dd:dc:aa:52:99:5c:1c:a6:6f:2a:07:8e:60:c6:7f:51:
b6:e7:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:18 2025 by rpki-client