Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: l6vD5xMo4TSq09wzckec7bJSnmxCoSKQSsZxgJiqntY=
Subject key identifier: 01:EB:F8:99:53:69:A0:E4:0A:28:83:BF:8E:FB:5A:B3:62:30:D7:9C
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019896DC53419E97607CA457A76264358BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0BC5
Signing time: Mon 11 Aug 2025 02:01:18 +0000
Manifest this update: Mon 11 Aug 2025 02:01:18 +0000
Manifest next update: Tue 12 Aug 2025 02:01:18 +0000
Files and hashes: 1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: z/9CBIgrpWkuy2/fWnZg9edA4cVyhT+VwPdq9sKpH8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:53:41:9e:97:60:7c:a4:57:a7:62:64:35:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Aug 11 02:01:18 2025 GMT
Not After : Aug 12 02:01:18 2025 GMT
Subject: CN=01ebf8995369a0e40a2883bf8efb5ab36230d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:73:64:df:7e:0d:df:b3:0d:c4:81:a6:3a:
a6:d4:ea:c9:65:de:13:d0:58:c2:0d:ab:9f:99:c5:
25:18:a2:d9:08:ac:04:7b:ce:53:2a:18:e6:f7:f0:
7a:ca:5c:8f:da:48:79:24:62:77:04:84:d0:c5:12:
19:6b:82:da:82:fe:7d:7f:c9:19:ca:df:ac:5f:46:
16:31:1b:77:1d:32:26:f0:47:55:0b:15:7b:84:2f:
3f:9e:91:2b:1d:31:77:98:d6:d7:5c:9b:b1:5f:0c:
83:39:be:73:08:55:d9:b0:ac:15:08:43:91:64:0d:
0c:8c:5a:5c:cf:2c:e1:f9:c9:d4:d3:53:c5:d3:d9:
2e:e7:26:e1:98:24:37:f1:84:e1:f1:ca:38:1d:55:
31:4e:5a:b8:03:bf:87:d5:24:fa:2e:c9:49:e4:c1:
48:1a:08:ff:5a:c7:83:69:f8:4e:f6:1b:57:67:63:
bf:35:c4:5f:59:ad:f6:04:ac:7a:1b:09:b2:97:20:
5c:6f:dd:76:86:31:6d:88:07:2a:ee:dd:93:f1:b0:
26:ad:7d:cb:60:6c:39:8d:f4:5b:57:af:8c:f2:c6:
34:5e:1a:c3:9a:1f:82:e4:0d:d0:72:45:67:b0:5b:
35:f0:7c:c9:a1:10:5f:4d:c1:dd:93:d8:f4:4a:5c:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:F8:99:53:69:A0:E4:0A:28:83:BF:8E:FB:5A:B3:62:30:D7:9C
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:76:2f:a1:11:3c:0f:eb:21:5c:90:fb:52:d1:57:07:9b:
be:c3:08:58:6a:24:c5:67:80:78:2e:10:1c:66:8c:30:56:b2:
4f:a7:05:0b:e6:47:c8:bc:08:7d:5e:ee:08:fd:14:4a:10:c8:
72:a8:cb:67:a5:7b:fa:f4:12:0e:91:73:84:dd:28:68:60:87:
9b:cd:b7:20:04:a7:cb:8f:49:81:5f:f5:fe:30:13:14:28:9c:
0b:c3:08:1a:ba:91:f2:f5:10:1a:0e:b7:83:f0:8e:e7:d9:60:
fb:16:1a:bf:43:b1:4e:7e:40:aa:8d:64:9e:3b:1b:df:cb:c5:
eb:63:e9:ac:b6:21:94:cf:f9:f5:ab:b0:21:0c:2d:c8:10:bc:
c6:fd:3c:6e:42:21:1c:0c:eb:81:91:9c:da:06:41:86:8d:75:
88:91:c1:80:f9:83:13:7b:9b:09:24:0e:f2:b1:1b:1e:71:50:
1b:75:c3:56:40:8d:81:9d:fb:1d:83:5b:f1:dc:d2:9d:ca:79:
8f:00:7a:ec:6d:24:b9:54:57:20:fc:0a:0d:af:8b:13:cd:38:
fc:13:a1:c7:d8:16:e4:ed:51:a6:fa:23:61:e2:3d:b9:75:54:
b7:4b:ef:d6:64:65:28:f9:38:d6:b4:50:44:76:1e:a6:4a:59:
88:33:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:58 2025 by rpki-client