Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier: 4HbF6Hsr8AdkIxltQsl/ZLXqRO+YiL+el+oUMst66a4=
Subject key identifier: BC:1D:26:68:D6:D5:6D:7D:62:24:C5:2E:D0:73:42:F1:EF:C4:BC:F8
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 019865B8DB32E88408B713BE50FF57D6350F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number: 1612
Signing time: Fri 01 Aug 2025 13:01:10 +0000
Manifest this update: Fri 01 Aug 2025 13:01:10 +0000
Manifest next update: Sat 02 Aug 2025 13:01:10 +0000
Files and hashes: 1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: 0I7vugiWMC+DaQ2U/JzPX0IW0UMojrAxhu0gWj/CKFg=)
4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:b8:db:32:e8:84:08:b7:13:be:50:ff:57:d6:35:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Aug 1 13:01:10 2025 GMT
Not After : Aug 2 13:01:10 2025 GMT
Subject: CN=bc1d2668d6d56d7d6224c52ed07342f1efc4bcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:e4:f3:2f:29:00:9e:81:69:9f:22:7a:d3:
56:99:10:2d:51:84:6f:15:83:19:bc:b4:7c:32:21:
e8:23:f3:65:c1:92:53:ef:7b:e2:dc:74:f6:e3:28:
52:51:2e:68:90:5c:fd:4a:fa:2d:89:83:28:58:ac:
38:1b:6a:b0:f4:21:6e:56:35:75:a8:cc:fa:cc:28:
c9:70:1b:a0:38:b9:95:7f:90:ae:df:ec:d0:dc:46:
f6:28:a7:d7:7a:c8:3d:1e:f4:c2:4d:8f:20:3f:9b:
a9:3d:60:9b:d5:2b:55:9e:ca:15:f9:17:49:78:bd:
b9:8c:9d:5e:ee:9f:73:bc:32:76:8d:54:76:f7:b7:
78:62:c1:70:23:de:35:7e:5a:d7:dd:f5:95:fb:65:
5c:ee:70:a1:71:3e:80:b4:2e:54:39:07:9f:e4:b7:
c8:6a:76:9b:a4:09:2c:86:e4:21:54:8d:78:ff:95:
c2:2c:db:c6:2c:6d:81:8b:8b:b3:9b:28:d5:c0:ab:
dc:81:66:a2:a4:62:f5:64:e0:1e:0f:48:70:8a:a4:
67:be:38:a7:f9:ad:3d:7f:39:63:05:49:c8:ec:61:
03:64:ea:fc:44:2a:49:02:8b:ff:a4:d4:0d:1a:f9:
f4:2a:f9:07:fd:08:05:d1:63:f7:86:eb:7d:1b:e8:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:26:68:D6:D5:6D:7D:62:24:C5:2E:D0:73:42:F1:EF:C4:BC:F8
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:81:c6:04:89:e9:d0:c1:d8:81:1f:44:5b:ed:e4:5d:73:07:
22:1b:eb:32:bc:b4:6d:af:2b:94:1d:97:a4:a2:6d:e0:ea:2d:
36:7e:62:51:61:41:83:3f:87:4b:fe:75:c4:a5:b5:d8:0e:41:
61:48:57:6d:ec:e8:09:fe:ef:f1:c3:8a:c8:78:32:d9:99:49:
9d:e1:79:a8:7d:91:a5:1c:b4:45:d4:7e:68:02:0d:64:0c:51:
a7:a0:ac:49:5c:e5:3d:2b:e3:90:03:bb:44:c1:55:7b:f9:ae:
63:04:c6:0f:d2:1a:f1:c5:a4:d1:02:0a:2c:55:dc:39:75:63:
1e:81:2b:36:0d:2c:c5:22:9b:b7:24:53:4d:72:12:c4:14:38:
92:c1:fa:3d:5f:58:b9:f3:31:39:f3:80:59:e3:d1:d1:d8:b2:
73:81:43:21:ce:47:b1:1b:84:9b:e1:e3:5c:e4:ce:ed:92:2b:
9f:12:88:a5:ba:f4:f3:86:e8:17:ad:d5:04:cf:f9:9d:e6:bb:
09:51:35:15:87:fe:a2:80:12:4a:e6:b4:ec:f2:2c:7d:f1:c2:
17:47:8b:99:dd:fb:82:88:1e:b4:84:7a:4c:73:71:07:7d:6c:
e1:6d:d6:d9:be:5f:7e:46:a3:18:dd:ea:d6:35:23:3f:4a:af:
ad:1e:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:48 2025 by rpki-client