Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: jU1DF6kv36HFO+7HgHN/awmN9mwVU+M1tq8EU4WMQ80=
Subject key identifier: 3E:F3:23:DC:58:59:48:61:05:C8:D2:99:A9:E7:88:A3:2F:54:AF:27
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01989336ADF2D1D424340DD607E4996CBC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 12EE
Signing time: Sun 10 Aug 2025 09:01:30 +0000
Manifest this update: Sun 10 Aug 2025 09:01:30 +0000
Manifest next update: Mon 11 Aug 2025 09:01:30 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: mK6QiJEi+zkjqbJWOa6QAR2CvKW6jXEw4i8lsOcbiMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:ad:f2:d1:d4:24:34:0d:d6:07:e4:99:6c:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Aug 10 09:01:30 2025 GMT
Not After : Aug 11 09:01:30 2025 GMT
Subject: CN=3ef323dc5859486105c8d299a9e788a32f54af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:38:b9:55:dc:80:48:84:b9:2e:ba:59:af:
fc:d7:30:05:4a:63:74:6f:09:b3:c3:5b:34:00:87:
b9:ec:6e:af:ae:1c:e8:17:c2:f4:81:5f:19:c4:ae:
95:a7:ad:6b:c4:5f:ff:c3:ec:b7:f0:8b:f0:b4:01:
3f:0e:60:e9:24:c7:3e:41:86:23:b9:98:30:c6:e1:
7a:30:c7:28:c3:c0:4e:c6:e3:39:57:45:2e:82:1b:
27:7a:66:ea:1f:77:6f:54:bd:bc:dc:4e:b4:e8:66:
50:7c:35:04:c5:6a:d7:6e:57:ea:da:45:be:74:4d:
d3:08:7d:e8:31:f2:d6:74:da:d0:d9:39:f3:93:ad:
4c:d4:3c:55:62:fb:7a:bd:97:eb:5c:3e:8d:86:0a:
83:9d:ae:3b:cc:b3:1f:e9:64:aa:51:84:84:29:18:
eb:f9:fe:66:98:3c:45:a1:1b:75:5b:a8:21:18:d9:
78:25:03:cf:14:44:ce:08:de:c8:86:94:9b:06:ed:
92:e9:b8:e2:8b:bf:a0:ec:0f:c6:1f:2c:79:5d:aa:
dd:b0:6f:70:ce:f1:59:84:89:61:60:4c:d2:c1:8d:
93:d0:b6:b2:81:5c:6c:12:b0:b5:f5:3e:47:3a:1a:
d4:22:6a:07:17:56:3d:f7:10:3d:29:1a:e9:93:66:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:23:DC:58:59:48:61:05:C8:D2:99:A9:E7:88:A3:2F:54:AF:27
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:ce:13:f4:50:ef:c2:e8:a3:ac:23:e9:9e:84:d8:ea:34:
39:e7:34:2d:30:da:cd:8d:85:dd:94:a3:73:30:3d:55:af:a0:
fd:0a:1f:8a:ed:f5:d9:66:2a:3a:1d:62:da:95:6e:a5:61:cc:
0f:37:f4:33:55:c6:bb:83:7d:f2:2e:63:ba:c6:15:ec:f9:4b:
9d:90:ff:fd:3e:f8:4c:bb:14:4b:0a:ce:f0:04:5d:d0:cc:b0:
95:46:5c:f8:dd:e7:3e:e4:b6:5a:26:68:0c:1f:fc:21:54:8d:
2f:db:88:4a:10:e7:60:b3:5e:ed:f9:0c:5a:25:d0:10:c5:55:
bf:c0:d1:b3:9a:e3:98:86:b5:d1:9a:4a:c2:0a:8b:bd:69:1e:
48:c6:b7:cf:f1:7f:3d:74:a9:5b:17:cb:57:26:89:db:20:fa:
c5:04:a6:9e:8a:e4:3d:12:2b:58:42:c6:44:62:63:43:62:36:
f1:ce:7e:95:dd:1e:d8:b2:16:34:59:69:1e:c9:de:74:5c:fc:
d3:4e:a7:86:33:91:f4:1e:d6:e9:1e:95:94:83:99:af:5e:e9:
cf:2b:89:9f:31:01:55:43:79:38:f3:73:33:b7:fc:38:a5:ec:
38:59:a4:86:5e:03:e6:4b:61:eb:96:3b:5b:4b:6c:e7:6a:c2:
48:ad:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:12 2025 by rpki-client