Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: PArhP/wBPIG/nPKDh3UbgEeSmVmG1ac83uvO7dW48IQ=
Subject key identifier: AD:CD:CC:F6:09:62:F0:58:F3:85:48:87:F7:BE:6A:FF:D9:2E:8A:18
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01987D8A6835C969E2A464116D1D91A42085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:19 +0000
Manifest this update: Wed 06 Aug 2025 04:01:19 +0000
Manifest next update: Thu 07 Aug 2025 04:01:19 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: NWVVx7wqGE/DZHAEWZcpT34muleG5RedWzID2xDl8IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:68:35:c9:69:e2:a4:64:11:6d:1d:91:a4:20:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Aug 6 04:01:19 2025 GMT
Not After : Aug 7 04:01:19 2025 GMT
Subject: CN=adcdccf60962f058f3854887f7be6affd92e8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:50:53:93:01:df:4f:5d:76:99:b8:74:f3:
52:97:72:9b:51:c6:11:ba:88:66:db:33:93:54:90:
01:11:a5:f8:0e:28:13:af:7e:f9:e0:00:a1:50:5a:
b2:1f:dd:b7:70:30:d9:76:df:03:07:ec:af:28:b8:
e6:be:08:06:bb:dd:73:86:24:bf:c9:d1:e0:d3:5e:
bb:ba:90:f6:cb:86:1d:9c:d4:01:2b:6f:c6:ad:0b:
20:31:76:df:5d:63:73:a6:c0:4f:bf:49:ef:a5:ab:
16:76:10:d9:e7:e5:1f:c6:a6:88:de:30:09:2e:e0:
08:a8:f7:45:31:28:e2:88:e5:f4:02:ca:b7:10:88:
90:4b:fb:1b:b3:00:f5:0c:15:cb:d4:ea:9e:77:22:
ae:91:10:46:8e:e7:22:16:05:15:27:b8:6a:0f:7c:
88:64:f3:59:af:a9:67:cd:7c:03:0e:1d:3d:b7:62:
27:e2:56:60:ae:4d:7d:c7:1b:39:db:47:af:ad:dd:
66:d1:ac:cc:59:e3:c8:60:77:8e:c7:76:6f:e6:36:
1d:e5:be:09:c7:a8:cd:2f:f5:a5:84:13:8f:8c:a2:
46:d2:5a:1a:83:bf:27:8b:0c:94:2c:38:b8:b0:e4:
00:84:6e:80:1d:a9:e6:a0:04:99:00:07:ec:fe:f1:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CD:CC:F6:09:62:F0:58:F3:85:48:87:F7:BE:6A:FF:D9:2E:8A:18
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:96:bb:a3:0b:8e:70:79:b3:ab:84:c3:f0:f5:b5:8a:4d:b4:
c6:13:42:6a:42:0c:c1:38:e2:3a:7d:9f:65:0c:ff:cd:9c:13:
12:ee:b3:bb:ee:15:0b:2f:c3:ec:c1:6a:dd:b0:d3:18:3d:a7:
bb:f5:09:4e:cd:1f:5a:b2:ef:ba:58:00:57:68:e8:b3:de:5e:
27:e5:33:a6:de:a6:3b:3f:81:51:79:61:ca:b5:97:b2:df:5b:
92:f6:08:b4:55:e2:6f:0a:b0:69:8a:8c:dd:89:cd:a3:4e:ac:
08:7b:2f:1c:89:bb:1e:9d:78:0b:7d:65:cc:ea:60:dc:61:d0:
c2:2a:af:47:ea:3b:39:d0:43:95:6d:a1:b2:92:a7:c5:7c:d8:
cb:18:a5:d3:7a:3b:ab:62:45:5d:13:cf:2b:78:7f:86:cf:ba:
e2:3e:b5:ca:98:dd:28:c8:69:2a:10:bd:16:37:27:8f:83:72:
a5:85:de:10:69:23:cb:86:d3:36:a1:a5:d3:e7:89:b9:3a:13:
7e:fd:9d:c6:b6:8e:f6:7b:18:5a:22:d7:c6:b6:52:da:90:c6:
71:3e:4b:ea:61:84:b5:1a:8c:66:c9:12:39:53:1e:cf:f5:a1:
be:a4:34:12:8d:6b:98:ec:d8:a2:06:a9:c6:1d:36:d9:05:c8:
43:d4:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:17 2025 by rpki-client