Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: QNKu9M8n9F2Y1A9ycQ47IqynZuUNUZbfIApNol3HnME=
Subject key identifier: 70:32:8E:80:47:76:BE:4A:41:21:A0:03:51:6C:D2:BC:81:E2:F0:39
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 0198744FAA8365267D4388AD9A90B6E4434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: fCgMq2zBz83j5aIu4e6C1jDdTW8TeawaRwvob2U+sqQ=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:aa:83:65:26:7d:43:88:ad:9a:90:b6:e4:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=70328e804776be4a4121a003516cd2bc81e2f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:99:c1:31:c1:f3:8f:5d:13:b2:e3:4e:8d:
d9:d3:6c:0a:d7:48:44:30:cc:d4:a8:7f:a5:29:6c:
00:d7:1b:55:4b:73:f3:ab:74:2a:47:4a:e8:24:47:
66:51:39:b1:0a:5c:66:44:6e:ef:4c:59:41:97:ca:
cf:b4:ef:32:a2:b9:24:de:0b:b0:c6:d5:9a:71:a8:
56:06:89:3d:ea:d8:82:fc:4b:4a:d8:bf:ee:5a:81:
3f:ff:79:de:d5:74:6f:c3:62:ae:40:1a:45:f6:31:
17:37:bc:35:7c:d4:7f:66:9c:aa:01:b6:a0:09:8f:
10:74:21:84:66:01:61:15:e2:ee:d5:bb:10:31:ce:
42:dc:ae:81:de:f3:11:68:dc:ac:6e:96:54:2e:2a:
73:f2:e1:cd:12:82:c4:e7:90:fd:93:3f:1f:13:5b:
e7:f3:2f:76:05:3c:76:29:54:96:08:e9:52:52:72:
1a:9a:ef:b9:0f:97:b2:4e:d0:72:0c:c9:96:f5:6f:
3e:f2:7c:7f:e8:4f:7e:cf:42:cd:9b:69:cb:3d:90:
e3:69:76:58:17:da:a0:e4:e8:e2:5a:c3:f5:11:54:
71:c5:c6:97:da:62:19:50:a2:9c:64:31:ed:a0:46:
d5:49:76:43:41:38:1e:bb:20:cb:a1:bd:28:8e:12:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:8E:80:47:76:BE:4A:41:21:A0:03:51:6C:D2:BC:81:E2:F0:39
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:99:eb:ea:0d:f4:76:55:c3:71:1d:58:c3:88:72:b7:3b:
00:3e:d0:09:50:e3:a8:45:bd:0c:80:1d:53:ae:3f:b8:04:d5:
77:a5:a3:60:8a:a9:0a:6e:a1:2b:b7:10:3e:a8:d9:bf:8a:f9:
51:69:dd:86:41:5a:68:5e:d8:a6:4a:67:2e:10:b3:61:b8:32:
9b:41:3e:7f:c4:08:87:a3:ec:7a:1b:89:d5:04:30:a6:49:76:
94:04:67:a4:95:2e:c0:7b:3e:e4:68:55:d3:cd:10:a7:12:af:
b6:60:fb:91:ed:1c:31:90:63:34:7f:82:b6:fe:5b:1d:ba:2a:
95:cc:b6:9c:65:c8:9b:1b:81:2f:dd:4a:64:64:67:2b:fd:7b:
78:78:eb:f0:0a:a3:d4:66:6c:ca:f3:2d:e6:46:ad:0d:a2:8b:
da:4b:25:c7:98:0f:7b:ff:14:44:ce:0e:5c:70:4b:8d:ae:3a:
be:b9:ee:d6:35:24:7c:48:1c:39:9f:a6:19:7f:53:16:82:29:
ea:1b:29:df:d9:5c:de:2c:6f:92:66:12:ac:9a:e5:41:02:a9:
b1:e5:f3:2a:ea:71:c4:4b:86:9e:b9:1c:c3:97:d9:5c:3c:3c:
10:85:10:43:71:a8:6c:18:22:2f:fd:d9:9b:c5:2b:08:cc:da:
16:24:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:50 2025 by rpki-client