Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: rQ68LGWZ4v9+v/H9aOOdmsS8bUAQQ59eSEpN7ZJ1nnc=
Subject key identifier: E5:7C:D6:DA:8D:0E:38:3D:C8:5B:ED:AE:41:36:49:A3:B2:95:32:BA
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019883FA6EC24D6645071ADEAABBF3F31985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 10:01:24 +0000
Manifest this update: Thu 07 Aug 2025 10:01:24 +0000
Manifest next update: Fri 08 Aug 2025 10:01:24 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: 5QFyOticfuQQFf45gUcOYESpUwZSlJiC+QQqMMxehQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:6e:c2:4d:66:45:07:1a:de:aa:bb:f3:f3:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Aug 7 10:01:24 2025 GMT
Not After : Aug 8 10:01:24 2025 GMT
Subject: CN=e57cd6da8d0e383dc85bedae413649a3b29532ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:0b:8b:ec:e0:b9:bc:31:c5:19:59:ca:79:
b7:63:32:fc:c3:56:c0:75:a8:ad:d8:18:b2:57:bb:
eb:38:b1:48:9c:0c:f7:41:d3:2e:95:42:e4:c0:1b:
63:35:7e:e0:b4:30:63:d8:6d:76:53:18:2c:91:e1:
2d:b8:9b:cf:d1:cb:33:be:52:fc:42:cd:02:36:b1:
b0:3d:eb:43:96:12:da:e6:24:e7:18:fb:03:de:e9:
d5:74:39:1e:a7:0e:b8:1a:6a:3c:df:26:e0:82:02:
cb:6e:13:86:b8:e2:64:d0:85:a0:24:e9:e0:f1:96:
f3:32:58:8e:96:69:95:9d:fe:81:0c:8e:16:e6:17:
55:20:07:74:e4:97:54:14:f8:7c:0f:8b:ff:0e:58:
9b:c2:dc:17:eb:08:fe:93:cd:e5:e9:18:e2:3d:ea:
b2:18:70:79:00:fa:6f:6d:de:ed:b9:87:dc:fe:6c:
94:bd:5f:28:0e:bf:65:89:22:69:ed:27:ed:35:12:
c5:ec:ea:77:3f:47:b3:bf:2c:aa:d2:7b:6c:3e:0a:
7c:64:c1:b8:18:da:82:cd:b5:22:c5:57:34:e1:0f:
72:cc:02:51:b7:b1:d5:d5:37:72:39:26:85:60:23:
c4:e3:1c:18:b9:36:26:3c:79:c8:b7:5f:d0:35:37:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:D6:DA:8D:0E:38:3D:C8:5B:ED:AE:41:36:49:A3:B2:95:32:BA
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:20:16:4d:6d:54:66:59:25:53:15:12:81:6b:31:c4:ad:5d:
b5:59:a6:88:b1:9e:5a:3c:09:f7:da:04:95:36:34:db:15:2e:
60:fd:3d:47:15:21:ba:43:d3:52:ad:c2:e0:3b:0b:30:02:e8:
23:3a:69:89:eb:6a:74:62:16:b6:0a:16:5f:55:e9:d1:53:3f:
30:3c:aa:7c:77:46:78:62:b3:94:74:51:ff:a8:ba:57:91:ab:
b3:11:e8:68:e7:1d:72:01:f2:c7:4d:23:aa:28:6e:67:02:92:
a0:95:72:76:df:b1:38:29:a0:92:43:59:d9:ee:1c:5e:c9:4d:
bc:d1:79:11:5c:a6:54:f8:03:6f:09:78:97:c8:ef:3b:c3:dd:
9d:8f:9f:87:42:e1:6c:cd:3a:93:ae:1a:88:c2:42:4a:0e:1e:
9b:27:6f:94:28:d8:24:81:fb:21:41:36:a5:af:16:54:15:78:
1a:3f:4b:65:76:40:f9:6c:bc:32:29:d9:a1:ca:6c:3a:17:ab:
b9:51:cb:46:cf:e9:2b:7b:44:a3:80:4c:c0:f0:45:92:6c:31:
12:92:14:47:0d:ad:d6:8c:bc:6b:7c:b4:f9:36:97:89:cc:ae:
54:7d:10:d0:8a:6e:3c:90:64:5b:cc:d5:38:aa:c5:66:4d:26:
80:fe:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:25:32 2025 by rpki-client