Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 3XMGwvhsbNAL/pyjnmaFcfyaqCntW/q9+T2V7PPy7vY=
Subject key identifier: 27:D4:BE:B3:70:B3:84:E7:40:43:A6:FA:AE:68:11:36:66:95:7A:07
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 01987C77C1F857224647A78EF1A75A30D294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0372
Signing time: Tue 05 Aug 2025 23:01:19 +0000
Manifest this update: Tue 05 Aug 2025 23:01:19 +0000
Manifest next update: Wed 06 Aug 2025 23:01:19 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: Q+IFIhbANQngljIKBqNubwysitNwa3UPPRdC8Nhe7Q8=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:c1:f8:57:22:46:47:a7:8e:f1:a7:5a:30:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Aug 5 23:01:19 2025 GMT
Not After : Aug 6 23:01:19 2025 GMT
Subject: CN=27d4beb370b384e74043a6faae68113666957a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:33:60:7a:5f:61:c0:d1:3a:c3:cd:12:d7:
76:bc:81:78:39:61:59:dc:2f:c6:10:b0:44:bc:2c:
03:39:14:bb:fc:65:ad:f1:07:f3:b4:93:98:ab:f8:
c5:da:f4:75:28:53:ff:3f:69:ad:ee:6c:ab:92:d6:
40:63:2d:01:5b:18:83:78:c3:f5:37:75:e0:92:3b:
be:80:57:4c:b0:f5:a1:ac:a8:7c:90:ef:b9:0f:c5:
42:2f:00:62:d5:29:95:62:86:78:48:51:08:57:fb:
8a:07:d3:a1:05:f8:e6:f8:5b:4b:29:0a:62:61:61:
37:7d:fc:95:48:a6:06:9e:bf:5f:08:22:80:ba:c3:
c4:da:01:5c:54:04:61:d1:c7:e6:cf:c3:c4:82:b5:
f8:84:c6:d7:71:dd:bb:68:ad:51:15:96:0c:97:8d:
7a:7c:6e:61:28:4e:10:a5:ee:e4:03:b5:2d:a1:af:
15:37:63:3d:1e:b7:68:39:27:80:f7:0e:44:4e:06:
a3:f4:bd:76:2c:72:09:23:1c:b1:e8:b8:7c:60:eb:
db:83:7c:57:3a:4a:39:1b:f6:df:5c:be:1c:b6:35:
50:13:77:0a:ba:62:be:08:16:bb:cd:f1:11:22:90:
10:54:b2:cc:cd:5b:f8:0f:82:d4:47:b9:40:4d:c0:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:BE:B3:70:B3:84:E7:40:43:A6:FA:AE:68:11:36:66:95:7A:07
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:40:76:eb:dd:a2:83:9e:64:91:b8:1f:1d:5f:c7:31:be:
3b:91:07:db:3e:92:e6:f3:2e:4a:19:42:91:98:8f:a4:79:51:
aa:55:02:19:9e:27:df:57:d0:20:44:c9:14:54:53:6e:5b:d0:
37:a2:6e:cb:54:f0:f3:02:ef:2a:57:fc:48:3e:79:ec:57:05:
e7:eb:06:2f:2d:95:b0:a7:2e:e4:75:fd:5f:ae:80:72:be:fb:
90:c3:b0:74:62:ed:75:4b:4a:b6:91:2d:43:86:be:d0:fa:c3:
65:d4:32:ed:06:81:ff:f7:1b:05:c8:81:e2:9d:f9:28:09:45:
97:d1:3c:52:0a:0c:2e:d2:df:90:47:a7:10:cd:be:94:6f:73:
af:07:f2:12:01:7d:57:01:5b:03:c4:28:32:bd:29:74:ee:fd:
03:ed:a6:06:71:76:09:fb:88:a4:78:37:2a:7a:e4:0f:82:33:
2d:33:12:fb:fe:35:aa:e6:91:e8:5c:9b:9b:a5:aa:5d:9e:83:
f7:93:d8:70:0b:53:0c:79:f0:20:db:b6:db:e6:91:6a:82:6d:
d4:35:8f:7e:4a:36:0e:84:a7:e7:64:28:d7:9f:6f:16:ba:ac:
e6:65:46:4c:c4:db:9c:b1:15:c1:ea:aa:1d:28:2a:81:52:8d:
bb:a6:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:55 2025 by rpki-client