Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: dLEef1oDtpqn5TkZmYYjsd9EcNYpwKMATHjneO3wYAc=
Subject key identifier: 44:C0:87:E0:D2:AC:76:3D:1F:70:0B:5E:E3:8C:23:89:4D:5C:F8:C3
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019873E3237ED8A94BB2D8883A89C96733F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0DA1
Signing time: Mon 04 Aug 2025 07:02:02 +0000
Manifest this update: Mon 04 Aug 2025 07:02:02 +0000
Manifest next update: Tue 05 Aug 2025 07:02:02 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: Qf0bjQXg1EOAZcivq7QmrFpV7V0j9s5520p+ecccLTc=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:23:7e:d8:a9:4b:b2:d8:88:3a:89:c9:67:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Aug 4 07:02:02 2025 GMT
Not After : Aug 5 07:02:02 2025 GMT
Subject: CN=44c087e0d2ac763d1f700b5ee38c23894d5cf8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:9f:07:97:0d:5b:da:48:3c:68:e0:d6:5c:
c5:19:d2:6b:20:64:04:43:f1:bd:6f:42:9c:42:76:
29:5f:d4:80:54:aa:d9:ba:66:20:35:5d:44:a8:09:
7f:fd:f3:9d:07:35:58:ef:6e:f7:a9:6e:08:fa:8b:
b6:d4:ae:b4:df:0f:e9:0c:ef:09:f4:c0:e9:6a:f1:
00:98:59:c3:c1:7a:2e:35:7b:bc:d0:d6:ce:8c:74:
24:d5:ee:a4:87:59:a9:71:e8:24:76:93:24:0f:71:
dc:cb:81:64:72:f6:7e:68:a3:ce:52:53:b0:22:8c:
c8:23:e5:98:00:b9:02:b9:db:95:1e:ca:4e:84:86:
d1:6f:1f:fe:2b:0d:ee:41:7d:0b:c6:29:c3:40:a3:
e3:39:3f:4f:da:33:3c:e4:61:4f:87:c6:b4:ab:4b:
a1:2f:45:d6:af:ec:56:6a:ad:ba:23:34:1b:ef:94:
5a:bd:37:e9:c9:a8:9a:b9:32:71:b6:26:e1:44:a0:
74:10:fa:55:8c:f3:d7:14:e8:f1:f6:d9:30:20:c7:
c9:b1:94:94:6d:86:dc:a1:3a:db:56:83:b8:6d:f4:
26:ec:60:c8:d9:ec:4f:a8:39:8a:25:84:ae:e8:4f:
7a:d9:ab:7c:d7:d3:b5:45:1c:54:fd:69:97:92:a1:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:87:E0:D2:AC:76:3D:1F:70:0B:5E:E3:8C:23:89:4D:5C:F8:C3
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:83:bc:1d:85:57:ab:d5:ec:a0:13:27:d7:64:ca:eb:4c:c0:
bb:8a:74:fb:1a:9f:fc:41:4e:22:bb:5c:30:ed:6a:1a:4f:12:
63:15:88:d9:af:4d:91:3c:35:a7:1d:8d:73:ae:3d:13:93:2c:
88:7c:6c:18:f6:73:bf:96:09:94:c7:2c:d1:14:df:bb:5d:e3:
a8:b4:20:d0:0c:12:fd:45:96:20:c3:91:0b:18:cc:45:d1:e0:
d4:97:64:f4:c3:bc:86:14:81:06:00:42:e8:2f:39:4a:76:e2:
27:fe:6f:06:f8:fa:89:8c:26:66:ac:24:74:0d:eb:68:ef:ad:
f9:4f:51:87:4e:e2:1d:79:ff:02:b0:67:9e:01:87:4a:66:3e:
a4:37:a9:cb:60:08:c6:8e:24:da:e1:f1:b1:a3:46:32:63:d3:
e9:66:28:35:de:54:f4:4a:75:13:2a:21:32:93:d0:f4:0c:b7:
2c:7f:1c:2d:68:81:9e:e8:c2:21:94:df:da:03:c5:89:08:96:
ef:9e:5b:f9:5e:3c:9e:66:76:9f:40:10:47:65:5d:73:b1:31:
fc:6b:39:75:a1:7b:7b:43:7f:64:26:e8:c6:e0:cd:cd:1b:a5:
14:08:ff:dd:fe:2e:0a:f7:98:f9:54:02:dc:4b:e9:fa:1f:af:
ad:79:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:22 2025 by rpki-client