Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: eucu9KYEb/XthNSEhv3MoQoAwdi2z8r1Rc27hErmSus=
Subject key identifier: 53:60:17:50:DC:8F:0D:D0:7E:59:BA:F3:B1:7C:FA:C6:19:7E:73:C7
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 019882B0E9AA323D84DA514132B80C28BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 05E9
Signing time: Thu 07 Aug 2025 04:01:28 +0000
Manifest this update: Thu 07 Aug 2025 04:01:28 +0000
Manifest next update: Fri 08 Aug 2025 04:01:28 +0000
Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=)
2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: QcWr23CGF889rzlSrj83cqX3oarTs3pLu/SR8nZraCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:e9:aa:32:3d:84:da:51:41:32:b8:0c:28:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Aug 7 04:01:28 2025 GMT
Not After : Aug 8 04:01:28 2025 GMT
Subject: CN=53601750dc8f0dd07e59baf3b17cfac6197e73c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:b3:f1:d5:de:e9:48:76:95:4c:34:99:d1:
91:8d:a6:0c:f1:1a:0f:74:1a:7b:11:76:19:90:89:
b2:0d:71:f9:74:37:a0:82:0c:25:b5:de:36:2e:b1:
d7:bc:5a:80:c4:e0:dd:9d:52:7e:08:31:72:1f:5f:
28:1c:ef:f7:21:50:5a:05:e3:53:6b:6b:a3:68:96:
ad:b6:48:59:33:4b:b2:74:94:de:53:2f:c2:78:cf:
d8:90:fe:d9:bb:e5:ad:23:b0:4b:a9:ae:e1:33:06:
00:80:95:10:be:87:67:f3:9c:bc:8c:80:ec:b1:18:
ea:11:f9:5c:d9:2c:ed:29:9d:13:f5:54:0b:bb:33:
79:7b:3b:bd:7e:8b:56:ed:c4:48:6e:c2:e8:bb:5a:
73:41:c4:66:32:ba:83:2e:03:01:04:15:7e:7a:0c:
58:d6:5b:f4:af:ed:b2:c5:65:50:04:8c:57:95:56:
03:4c:54:4a:32:a8:c3:c2:c7:82:41:90:ca:4b:19:
86:4a:64:1d:91:c3:60:98:a7:ee:3d:27:ab:64:d1:
23:7e:2b:6a:dc:98:7e:13:69:0c:94:50:79:60:75:
7f:03:84:e2:b4:26:e7:cc:4b:71:34:f8:10:e0:05:
74:ec:85:af:fe:78:9d:87:ea:bf:cd:ad:8f:39:fb:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:17:50:DC:8F:0D:D0:7E:59:BA:F3:B1:7C:FA:C6:19:7E:73:C7
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c0:68:ca:6f:cc:eb:3c:0b:6d:ac:e3:16:2d:88:d1:15:43:
83:f5:33:ab:ea:0b:a9:ae:c0:0e:2d:1b:94:e8:49:89:74:a4:
b9:0c:ac:7a:18:2f:94:7a:10:b3:75:fa:a1:c3:4b:6f:e3:03:
d7:25:f6:f8:4f:b6:29:14:cc:e6:1a:d7:d2:3e:97:b8:bd:d9:
53:2d:8a:36:1f:37:ce:b1:59:42:e2:49:cd:6b:80:63:92:d7:
bc:d5:df:91:8e:ce:fe:3d:85:67:c2:4d:ec:fb:db:95:6e:61:
b8:80:91:d9:a6:7d:32:e8:d3:35:cf:0b:63:9e:5b:9f:93:2f:
fd:69:b5:e8:fa:7c:fa:96:f5:ae:fd:1c:e2:1c:6a:38:a3:59:
c3:ff:56:6f:c1:44:7b:70:08:56:08:12:ed:6f:02:cf:d2:92:
b8:20:ff:13:f9:3f:98:9a:40:80:7d:d8:48:20:4a:9d:13:74:
cd:1e:7d:88:28:3a:5a:fe:38:b2:a1:79:86:d9:ad:b2:4a:ef:
7e:26:a5:24:66:cd:34:e7:91:51:9a:08:fd:bf:53:a1:8d:f6:
c4:8c:d1:15:c0:1b:ee:f3:f2:03:d3:9b:7f:27:1e:4c:18:0b:
7b:a1:52:30:fc:d8:76:8a:c5:92:ea:96:63:49:61:54:cd:d8:
57:4e:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:53 2025 by rpki-client