Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: HywO1WNgI+Jf6h5S2vrGfY+1VMbXkoI2Xwnt3eskaEo=
Subject key identifier: EF:D3:7A:B4:93:71:D0:2C:9D:AA:19:0C:EB:62:A4:79:19:89:E0:86
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 019873E35542B3B2DA84BE46D9FF7CB8A773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: nMefg/tPU+LXz/kYgOICxeIvn2nZctj2LF7/6pGUIiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:55:42:b3:b2:da:84:be:46:d9:ff:7c:b8:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=efd37ab49371d02c9daa190ceb62a4791989e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:5f:a9:be:e3:11:0b:02:4a:e8:b0:85:2c:
b0:4f:c8:dc:28:7d:85:fe:5c:9d:0b:35:17:87:f0:
ab:5e:0c:e5:a5:8e:8c:86:cd:2b:b1:3f:2b:63:c0:
87:f7:71:4d:5e:fa:3d:cb:6a:46:ea:44:ae:3e:d1:
5b:91:0f:29:2a:da:f4:75:a5:ea:b7:47:0d:26:12:
30:ae:24:a1:0f:b8:69:38:90:b3:68:32:1e:b5:df:
16:f7:7b:ea:a9:76:71:45:dc:11:cb:5c:75:88:3b:
9d:37:58:f4:89:25:c2:ee:dd:b9:e4:f0:c0:4d:ae:
72:91:f4:e8:3a:c2:01:71:f5:15:67:71:aa:f7:f1:
97:50:e5:2c:5d:1d:65:39:e4:35:61:2e:ad:07:d8:
28:14:96:ce:7a:7a:ea:04:2d:19:3c:ca:4c:ee:61:
d4:02:ec:c2:0b:f5:e3:88:97:a0:ff:63:f8:56:5d:
89:cf:0f:4a:e2:30:91:0b:de:f6:da:21:5b:84:f1:
30:d8:79:79:b1:8c:08:90:c5:5c:11:bd:45:63:e5:
6a:56:e5:c1:46:b7:d0:de:ae:8f:a1:bc:d7:e6:2f:
c0:44:02:75:2a:d2:32:ab:74:d7:e4:2e:b2:ce:b8:
6b:bb:1c:7e:ce:6e:76:17:1f:be:f5:ef:55:fd:35:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D3:7A:B4:93:71:D0:2C:9D:AA:19:0C:EB:62:A4:79:19:89:E0:86
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:fe:4c:60:47:bc:9a:42:e7:0b:68:f1:b8:d8:96:3c:9d:
6f:dd:d6:6d:b1:ab:0d:04:36:73:12:37:05:18:f7:c8:1a:2f:
57:a9:2c:17:20:4c:27:f3:1b:75:0c:ac:17:3c:17:cc:aa:39:
72:25:f2:ae:81:a3:98:03:a7:b2:1c:24:ce:ef:4e:c0:90:a5:
d5:c2:73:a5:29:f6:b6:e9:5a:11:03:e8:b2:e4:06:bf:37:9f:
8b:ea:b8:c1:03:d7:77:10:2a:f4:75:c4:f0:e7:af:68:f1:17:
96:32:f4:3c:f6:02:b2:ae:9d:70:93:94:86:11:b1:ee:60:59:
72:1a:14:13:7b:30:0d:98:fa:fd:a4:4f:e8:7d:42:49:bd:0b:
d0:63:fd:1e:0e:26:ba:f3:d8:35:00:d2:bc:71:95:fb:7f:ad:
94:6f:d6:53:bc:82:81:90:0f:00:52:c1:54:c8:50:2a:4d:b1:
12:cb:cb:68:a3:10:87:e1:ee:59:28:df:84:9d:38:26:7a:22:
65:14:48:1a:f4:26:5f:af:f2:86:15:3d:b3:73:46:15:1c:db:
5b:53:ac:68:ad:c3:5b:da:c3:df:3e:6e:b1:1a:9a:d5:e1:98:
35:49:2c:18:aa:ea:b5:c4:14:00:6a:f9:b9:36:b3:c7:92:e1:
b7:81:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:57:35 2025 by rpki-client