
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: 7TcYX7ydsan6envBgE0Jw7b7M1HAv9ucwZXfAnE65Wc=
Subject key identifier: A5:95:9B:CC:DD:D6:E1:2D:5E:AC:CE:B1:4C:65:F5:92:A6:7D:41:FA
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 019872985F3352C47B0727BDE9705E18144D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 01:00:45 +0000
Manifest this update: Mon 04 Aug 2025 01:00:45 +0000
Manifest next update: Tue 05 Aug 2025 01:00:45 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: sOH3vsmSSpqrz9Top/hkAdgV7BRNRg1C5pVKAWnzgA4=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
3: iGABUqcXXN7aOyjtrZCgc7fQPto.roa (hash: GEJ0Of7uNCnr4mLuQTqHOBw0HqR8tQuPsFCRYfeeMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:5f:33:52:c4:7b:07:27:bd:e9:70:5e:18:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Aug 4 01:00:45 2025 GMT
Not After : Aug 5 01:00:45 2025 GMT
Subject: CN=a5959bccddd6e12d5eacceb14c65f592a67d41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:0f:ba:73:90:a7:9c:36:c2:f3:10:f7:a2:
64:73:a9:15:f9:c0:72:dc:5c:de:e2:2f:81:ba:8c:
fa:30:93:e4:6d:f1:30:34:cd:80:d8:ad:5a:36:23:
de:69:ac:67:86:ae:6b:15:65:7d:1d:c0:ee:48:1a:
03:bc:12:39:cc:0f:2e:2e:83:fb:cf:a5:06:d3:c6:
3f:34:c3:75:41:b3:31:eb:4f:01:63:b0:3a:cb:33:
f9:40:4f:18:4e:7f:c7:fe:ae:12:a0:99:cf:52:fe:
86:19:9c:46:67:1f:b9:32:e7:52:17:53:05:91:1c:
73:a2:21:33:6b:31:ff:54:0f:c9:24:85:9f:36:2c:
b7:35:4e:c3:95:80:a2:0a:e1:7d:ff:13:03:42:cb:
76:c3:72:ca:a5:5d:65:96:09:53:53:70:c7:06:ca:
1c:86:3a:b7:10:3d:ff:84:a1:47:17:a4:7c:d0:41:
74:a7:5e:61:d1:5c:e8:53:4f:81:83:9d:01:8f:3d:
14:71:a3:c3:96:0e:ff:6f:f4:9c:b1:08:54:2a:10:
f7:b0:b6:2f:3d:0f:f4:0d:ce:87:ee:bf:0c:15:a2:
c6:b9:b0:63:d2:b0:eb:0e:c6:07:96:f3:04:71:5d:
53:03:95:46:3a:f2:83:0e:67:45:20:87:39:3a:15:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:9B:CC:DD:D6:E1:2D:5E:AC:CE:B1:4C:65:F5:92:A6:7D:41:FA
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bc:06:db:ce:3b:bb:7e:04:ad:05:da:aa:35:54:53:11:93:
dc:5a:34:e1:39:86:b0:e4:95:ce:40:df:61:d5:cb:71:6a:71:
10:c5:1a:8b:27:40:f7:16:6b:05:96:9e:53:9e:5d:bb:a4:60:
7e:56:7a:94:2c:d5:25:7a:da:c9:ab:5a:71:45:7a:19:c6:ae:
a2:d3:e1:2c:5c:95:1e:2f:8e:c8:61:b8:20:84:f1:d6:e5:ce:
17:7d:d4:b9:9d:e5:6b:08:65:94:81:0d:6b:c4:c8:3e:52:ef:
d5:68:06:c8:1f:03:25:78:7b:0c:36:20:c3:ab:83:31:33:14:
41:8c:3f:46:26:d1:e5:7c:b7:43:a5:4d:96:43:ad:57:c1:5e:
15:af:c0:4b:8b:46:67:b3:27:9a:c6:5c:dd:b8:49:1f:48:b2:
3d:1f:f9:7f:3c:19:71:96:ef:cb:a4:fd:26:6b:73:68:10:9a:
46:5e:da:47:e1:b9:be:34:1a:ac:f2:65:f6:a8:2f:91:5d:14:
fb:a7:ee:7b:69:8c:9c:01:07:ee:92:2c:30:61:2f:f7:04:e6:
df:4f:1e:21:84:e8:ac:b5:5c:b6:57:64:ad:03:a1:4a:13:ee:
30:1f:33:1e:d4:2e:7b:d9:50:53:e7:aa:5d:a4:68:ce:1b:a6:
6b:0f:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:27 2025 by rpki-client