Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: J1b9WcVcJ8dfHktFCw/8Tarp4gitWf4FpfECT5EzvVo=
Subject key identifier: 5B:3B:E0:1A:F7:26:63:8C:46:F5:21:92:F9:C1:24:72:6F:52:43:40
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01987D8BAB93CAED8DA34138F24029AD3AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:02:41 +0000
Manifest this update: Wed 06 Aug 2025 04:02:41 +0000
Manifest next update: Thu 07 Aug 2025 04:02:41 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: Et1bBNaQDZieGSWgREHtiLAPm8KZ8hKaeoO+kF8xHVU=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:ab:93:ca:ed:8d:a3:41:38:f2:40:29:ad:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Aug 6 04:02:41 2025 GMT
Not After : Aug 7 04:02:41 2025 GMT
Subject: CN=5b3be01af726638c46f52192f9c124726f524340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:0b:61:42:e2:7b:87:8b:bc:6d:98:b5:f8:
63:5d:bb:ac:47:0f:c4:ef:c4:80:7c:fc:d5:df:47:
ac:a1:b5:4f:a9:32:05:f4:2b:29:a2:18:53:16:b5:
1f:19:8c:78:f3:4a:27:dd:bd:4c:8c:ed:70:4e:ea:
f2:b1:2a:f0:61:38:52:57:44:25:c0:ef:f0:74:d8:
c1:b5:34:25:c0:92:3d:b9:e4:2e:6a:7d:20:ef:92:
0b:c3:c3:a5:b0:1e:89:72:54:61:e1:6d:99:23:ff:
2b:cd:32:1a:25:8c:02:c1:ee:da:5b:7b:c2:52:3e:
a1:95:43:ee:3c:61:97:0b:ce:6b:6c:aa:85:8a:6c:
79:6d:c1:c9:c4:87:c7:f1:4a:6c:9d:29:7e:cf:6f:
e7:37:1f:ce:4d:35:04:c6:8d:e5:50:98:33:1e:3a:
13:2f:3d:3f:c3:55:fb:88:92:98:62:af:3d:da:42:
6d:30:e6:da:c6:1c:f5:a3:d7:7f:8b:71:d2:68:9e:
08:7b:74:88:ed:da:1e:1c:46:15:3f:b2:4e:e0:4f:
90:25:25:12:b4:77:7a:f5:43:c5:a5:0d:9e:26:4e:
31:ec:22:20:a3:c0:36:64:29:7e:ca:cc:b4:b7:b2:
5c:d0:b9:e6:6d:26:dd:91:e7:7e:5e:93:c4:17:7f:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:E0:1A:F7:26:63:8C:46:F5:21:92:F9:C1:24:72:6F:52:43:40
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:63:71:17:cc:9a:6f:99:9e:c8:85:9b:6f:01:dd:30:76:
3b:4a:4b:6c:4e:a9:32:4f:d9:5c:e5:3f:9b:31:5b:8e:76:fe:
8c:6c:28:cf:45:d9:31:5c:1a:4d:81:09:2a:c8:b2:10:7e:76:
35:1a:20:52:d7:73:cc:53:ad:6c:b9:2f:56:08:e9:a2:5e:4a:
7c:3c:35:38:a6:d6:bc:d5:f3:77:c8:23:a3:13:ed:fa:1f:0e:
3e:d9:2b:e3:1d:50:a1:34:42:39:a5:18:32:c0:91:92:15:12:
16:db:69:cf:2b:e4:ba:f3:73:83:e5:ed:45:1e:33:13:97:59:
cb:cf:76:94:34:52:aa:49:60:de:4b:0f:c6:d5:fb:04:5b:51:
cb:9f:37:e3:e8:67:a7:e8:a9:8d:71:96:cf:c4:af:5f:bf:c8:
c8:69:a7:51:0e:4f:7c:25:63:2c:78:26:6e:fc:9e:8c:13:56:
b1:10:94:d4:9d:2b:99:fb:bb:6e:b4:2c:d8:2e:c8:09:26:2c:
d9:08:ba:88:17:39:f0:ae:54:ea:fe:3e:26:65:6f:ae:72:d7:
e7:22:a1:f0:9a:15:05:a0:8f:64:f7:ea:9b:ab:0a:ba:8a:cf:
8b:86:aa:c4:af:a9:54:50:80:4f:df:bc:af:33:87:5d:f3:4c:
04:e3:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:32 2025 by rpki-client