Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: gmB1xELo7mPNUVLgSjqCN9JmpLK2ZfQe0Vd327Sf95g=
Subject key identifier: A1:19:46:41:78:BE:CF:5E:92:3C:C3:04:62:B3:74:F9:78:F1:1D:B4
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019872CF77159F940E10E5C7967F8B7B7795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 07CB
Signing time: Mon 04 Aug 2025 02:00:55 +0000
Manifest this update: Mon 04 Aug 2025 02:00:55 +0000
Manifest next update: Tue 05 Aug 2025 02:00:55 +0000
Files and hashes: 1: Evho_cMgUimufNWmo89VlB8ZA3M.roa (hash: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=)
2: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (hash: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=)
3: OTa2_ClY6w9bRnknrGzz6ZpLbY0.roa (hash: auzCJAX6dLQz9Niz6mEEUMnopgCP2rrZW6Motu990Ng=)
4: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: 460+o++y55d5zNsvfiy2NxJRYRkbrAmNj+dEf9AEff8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:77:15:9f:94:0e:10:e5:c7:96:7f:8b:7b:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Aug 4 02:00:55 2025 GMT
Not After : Aug 5 02:00:55 2025 GMT
Subject: CN=a119464178becf5e923cc30462b374f978f11db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:4f:9f:cf:7e:96:ae:13:4c:ef:7b:3e:74:
79:1f:32:bf:4c:7c:80:cc:7c:5d:25:52:c7:43:8b:
30:dc:44:ea:5f:88:2b:d9:c1:6d:9e:00:ec:b4:69:
3c:70:b3:d2:3a:ca:17:e4:db:33:79:95:ac:35:3a:
94:ce:d0:9c:c9:d2:54:65:5e:51:3c:8c:81:f2:10:
5b:e0:5d:70:6a:25:7a:76:82:48:d3:c4:2f:f7:cd:
2a:03:bc:67:01:64:0d:6e:04:6f:48:be:94:f4:90:
78:e9:03:aa:0b:58:bd:f0:e2:c3:31:95:12:80:fb:
b8:31:30:6f:63:53:35:a3:46:f1:b3:57:b2:41:35:
39:91:19:5f:24:d5:96:af:12:09:45:c8:36:6d:6f:
72:f1:42:ea:dc:99:62:e4:38:cf:17:19:80:36:42:
d3:5a:db:40:e9:0b:0e:be:f6:6c:c7:e0:b5:82:ae:
c2:28:4e:7a:0e:0a:70:97:2d:1c:72:f3:3b:9f:62:
f9:fd:a3:ed:3d:06:b0:5e:24:32:90:d3:02:ef:3f:
3a:6d:c5:95:f0:4d:93:f3:5f:9b:06:27:2b:4b:99:
9e:fe:46:85:05:34:92:7c:cb:09:80:9e:44:6f:3c:
71:73:f0:e6:69:28:89:b2:f1:1f:eb:d1:a4:e3:ec:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:46:41:78:BE:CF:5E:92:3C:C3:04:62:B3:74:F9:78:F1:1D:B4
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ee:ec:63:ac:69:df:1c:3d:04:06:3f:b4:cb:47:29:47:50:
77:47:8b:69:6e:7c:3b:10:a0:e9:ae:29:4d:8e:10:b3:51:1c:
16:1e:ff:d6:2d:c5:79:c3:b3:d7:5d:1a:94:75:19:ee:27:70:
e3:3c:a0:aa:43:79:8b:74:b5:d6:55:67:c6:3c:42:a2:7f:ec:
d5:2c:b0:81:be:2e:2d:1f:58:ee:29:c5:7a:98:df:27:8f:04:
c5:15:a3:17:1e:b1:54:a2:8f:7c:09:61:0a:ea:23:e2:d4:6d:
ce:22:4f:63:61:4a:eb:6e:7f:34:6a:e8:81:6b:58:40:7b:79:
81:91:36:7c:28:2a:e7:b4:4e:c9:f3:fc:66:4b:22:5f:dc:14:
27:05:12:7c:64:4b:5a:f2:a6:37:e9:95:4c:1f:29:dc:e0:00:
70:60:67:82:2d:69:d5:d9:f2:17:64:23:8f:9e:ff:4c:1f:ee:
ae:9d:1a:9e:a3:f8:31:e4:be:6e:9a:2e:1b:c3:42:88:38:0a:
0a:21:02:03:d9:b2:fa:f0:cb:0a:3c:e4:78:68:0e:bd:7a:e2:
98:e9:0c:62:0d:bf:e3:60:4b:2e:ae:ae:fc:54:6f:3f:88:d2:
ae:5e:cd:ef:18:93:73:fe:de:60:7d:4f:04:bf:80:20:1b:f0:
2c:70:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:18 2025 by rpki-client