Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: i04VvSpCA55Bm5Jn+/9AAS0qKUAfz34BMDAEbQNX6Kw=
Subject key identifier: 2A:08:56:FC:18:4A:D3:40:40:76:8C:E4:C9:B1:32:3F:D8:DD:F4:DF
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01987F7A1F910C002808936BFBEDB0FB5F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:02:46 +0000
Manifest this update: Wed 06 Aug 2025 13:02:46 +0000
Manifest next update: Thu 07 Aug 2025 13:02:46 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: VNglQbhwYWb/ybz0lqzuHQ3MkgNfz2RtGCyzuGJ7+zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:1f:91:0c:00:28:08:93:6b:fb:ed:b0:fb:5f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Aug 6 13:02:46 2025 GMT
Not After : Aug 7 13:02:46 2025 GMT
Subject: CN=2a0856fc184ad34040768ce4c9b1323fd8ddf4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:2d:9a:17:e7:e0:98:82:31:aa:d6:0a:d1:
ba:6d:6f:a0:15:cb:ca:ed:cc:f9:a3:af:6a:2f:b3:
a6:21:b8:af:b6:f4:d8:d3:40:c7:aa:b6:b6:88:d4:
b8:df:00:5f:4c:03:1b:ed:cf:10:18:41:9a:6e:89:
26:5d:e4:ed:a4:d1:af:67:c6:38:fd:37:51:50:89:
b9:e3:80:1a:6f:7d:6f:6d:be:b9:41:5e:1a:75:d7:
60:f6:70:92:f3:11:c1:05:cf:57:7e:f6:56:74:41:
e5:ab:b8:70:b6:54:95:b8:ad:02:d4:09:25:70:43:
92:bd:33:7c:a2:db:b5:76:9c:19:32:5d:68:e7:b4:
1e:59:ab:ff:21:2c:2d:08:c0:ce:d5:98:d6:ee:75:
8a:8c:45:c2:1e:6c:84:b8:0a:e2:07:41:d7:91:dd:
b4:70:cc:c1:e2:f9:b6:3a:ec:06:32:2d:87:58:47:
fd:7d:0a:fc:e4:25:5c:64:38:aa:83:b1:32:aa:42:
3d:c7:84:23:61:fa:2b:25:b1:75:92:6c:87:eb:65:
97:ad:78:83:c3:b5:a2:49:2b:95:04:7a:bf:2b:34:
01:b9:21:fd:5b:9f:0d:af:71:1f:9f:ec:44:87:68:
de:5d:d0:e8:e8:ad:7c:0d:3b:69:1c:d6:db:9f:68:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:56:FC:18:4A:D3:40:40:76:8C:E4:C9:B1:32:3F:D8:DD:F4:DF
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:c7:4a:ba:7f:60:59:5f:cb:2a:95:96:7c:98:2b:20:c2:
e3:2f:26:04:8d:12:e7:91:2d:9d:2e:75:cc:e4:dc:aa:2f:ef:
f1:4f:03:a4:93:3d:25:6e:d8:33:80:31:d1:e4:2d:98:77:0f:
ae:39:44:dc:f9:33:31:14:3e:5e:25:36:ea:c9:90:b2:d1:f1:
f4:71:9f:a6:0a:0c:23:3c:71:7b:06:14:69:48:79:51:71:72:
72:3b:8c:cc:22:d9:b2:51:48:a0:56:b9:ed:c9:dd:ff:2e:6b:
f0:0d:c2:2d:df:5b:c7:51:73:d2:e1:df:bc:6a:fc:7a:aa:83:
99:df:ae:75:29:0d:fe:49:15:3a:38:93:bf:fb:8e:25:bc:79:
92:f2:8a:0e:30:70:2f:cd:dc:78:71:b7:b0:aa:f3:61:49:d4:
ff:dc:f0:6d:5e:62:92:43:13:97:09:b9:9d:26:2f:3c:34:89:
b0:5e:d9:40:d5:20:78:83:7d:1a:77:ab:b4:a2:5f:1a:24:92:
a4:6d:74:c8:a9:da:da:c5:e5:d3:c3:46:f3:f9:03:23:be:52:
6e:54:04:23:98:75:11:eb:15:e1:69:48:34:15:48:55:75:2d:
ac:d0:13:c3:67:51:56:8f:28:37:3e:88:56:64:ce:5c:1f:01:
c1:fd:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:57 2025 by rpki-client