Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: rpoYbb9s0Pc/0LQsR19k7OjNIHADmxQ3ZZ6gTtuvaNk=
Subject key identifier: 77:08:99:C8:B8:9C:DE:B2:9A:58:54:9F:F0:64:CD:EF:FA:B7:DD:BA
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0197D8F59A7FB50C0D3CF982F03553D1495D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0854
Signing time: Sat 05 Jul 2025 05:01:03 +0000
Manifest this update: Sat 05 Jul 2025 05:01:03 +0000
Manifest next update: Sun 06 Jul 2025 05:01:03 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: 7eNO2yCFZqX4fAQiOOzgK3Anrl/sdnZZeRuRW2XxrUw=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:f5:9a:7f:b5:0c:0d:3c:f9:82:f0:35:53:d1:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Jul 5 05:01:03 2025 GMT
Not After : Jul 6 05:01:03 2025 GMT
Subject: CN=770899c8b89cdeb29a58549ff064cdeffab7ddba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:39:f5:57:d7:06:d3:b7:72:af:77:77:69:
d2:da:96:cc:1f:30:e8:af:4e:18:6a:0e:5d:4f:e0:
9e:cd:05:60:a4:1f:b4:c3:78:fb:8a:6e:9a:b4:54:
69:88:1f:3a:e1:45:b5:a9:73:f6:52:1f:f7:a4:64:
e9:cd:9c:58:c9:8b:1b:99:08:ac:2e:89:aa:e0:48:
19:cc:29:cb:9f:bc:99:4a:a6:3e:8a:f0:70:96:1c:
a6:3b:0c:22:8a:5e:df:88:fc:89:d7:a2:ec:bc:f5:
bf:d9:91:ed:b8:4a:43:5d:91:81:b3:13:ad:39:86:
45:68:52:1b:5c:33:48:9a:2f:91:b1:08:d1:83:10:
59:96:8a:3b:ad:2f:e8:cd:3b:26:94:8b:4d:d8:0c:
95:89:35:9c:50:a0:38:2f:4f:05:20:bb:9a:70:7e:
60:06:16:a6:9e:03:6e:49:00:5e:2f:39:a1:c7:9a:
0d:34:56:69:96:94:bb:5e:24:f0:08:a8:e8:1a:d3:
8f:6d:7a:52:50:83:89:54:5e:4d:fd:86:7d:a8:a0:
06:78:22:18:68:07:fc:a8:99:2f:72:5d:b9:5e:0e:
4a:76:6f:e4:05:f2:f8:9a:6e:8a:73:cc:12:8d:3b:
d1:13:62:44:a4:b4:43:c8:f1:c9:0d:20:5f:a1:5b:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:99:C8:B8:9C:DE:B2:9A:58:54:9F:F0:64:CD:EF:FA:B7:DD:BA
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:97:86:f0:78:3d:13:ac:15:24:f9:1a:b1:a6:ce:b1:10:06:
60:de:78:df:fc:ed:a9:ca:a3:75:cc:f9:ce:db:7d:20:0d:76:
05:7d:2d:e0:f9:ae:7b:3b:4d:71:51:85:d7:ea:49:a9:4d:72:
2e:32:9d:d3:a6:e8:02:db:57:2f:55:59:8c:e8:8f:4c:39:a1:
31:46:60:db:95:eb:93:ff:ea:79:f1:6e:07:f9:66:95:c0:0e:
35:73:d6:de:06:52:6d:e8:04:73:20:f9:c1:e6:ef:6b:32:bc:
be:b5:29:12:93:3c:bf:80:d5:aa:6c:b2:65:f6:aa:a6:46:c8:
c7:37:f6:71:c6:49:af:3f:c7:ef:7e:c9:c1:97:eb:64:b3:e1:
71:b4:64:ff:4a:74:2b:5b:c3:2c:b8:b0:97:72:e9:d1:4a:36:
a0:cf:15:fc:6d:77:5b:3c:8d:93:a4:13:8e:56:bf:cf:b1:87:
a7:a3:04:65:5f:e1:b7:f5:24:f4:3d:ae:13:db:d1:9a:c9:02:
35:92:10:5a:0a:fe:74:43:02:2b:91:ef:68:33:3c:38:29:0e:
32:a2:aa:c1:e5:15:e0:89:c3:e2:2e:97:75:e7:6b:04:6b:10:
f9:92:a8:4e:77:14:6b:00:d7:c3:d6:a7:2b:98:b7:78:13:2c:
b5:bd:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:56:16 2025 by rpki-client