Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: +n66K2HuwxRJjIEAyDC5mDZ9Xor/V2kF/6DN+h/zxhY=
Subject key identifier: A8:8A:F3:44:EE:8A:29:26:78:27:09:D0:F4:3B:47:24:A7:7B:DD:AB
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019884314ABDD1138F427F0EC3405CB2C873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 11:01:19 +0000
Manifest this update: Thu 07 Aug 2025 11:01:19 +0000
Manifest next update: Fri 08 Aug 2025 11:01:19 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: Jz2VivjBTXG5EcYUxgXhrNYhv9bgmQleaiXSPC+pIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:4a:bd:d1:13:8f:42:7f:0e:c3:40:5c:b2:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Aug 7 11:01:19 2025 GMT
Not After : Aug 8 11:01:19 2025 GMT
Subject: CN=a88af344ee8a2926782709d0f43b4724a77bddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:bb:e1:eb:f9:88:b8:5a:fb:a7:01:08:5b:
2b:90:dc:75:7f:9d:2f:8e:a6:d6:86:e4:52:81:03:
58:28:08:e0:96:82:a8:fc:4c:9f:2e:50:23:15:2d:
86:5d:81:81:2b:ef:ca:51:6d:63:e2:5b:7c:b4:89:
9d:eb:23:22:b9:49:23:72:03:32:73:ce:91:56:de:
2a:56:74:77:08:e8:8d:1a:11:b5:47:7d:33:eb:63:
76:3e:81:70:e8:9e:6d:e2:9f:af:18:88:b1:e1:19:
ad:78:d2:2f:49:03:d4:ee:1c:da:a7:f9:74:79:e6:
b8:97:75:9d:ca:5e:08:36:71:54:91:6e:3e:77:90:
63:65:1d:f5:7d:09:86:6a:92:20:8f:d6:6d:36:30:
81:5e:3d:03:88:8a:28:ca:04:98:84:68:cc:5b:29:
6b:98:f5:53:b2:79:6b:5b:aa:01:39:bf:fe:74:2a:
10:b6:fc:d9:ff:ae:99:37:1d:fc:0b:61:e6:e2:b9:
18:61:75:b8:b6:82:d8:db:0c:20:2a:0c:ac:db:cf:
8f:d8:3f:73:4d:94:d9:97:fd:17:e5:db:76:59:97:
25:13:89:74:78:f6:47:8f:63:17:fe:19:92:7d:9a:
6e:ff:40:ff:8f:5f:fe:01:34:d5:8e:8b:5a:75:97:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:F3:44:EE:8A:29:26:78:27:09:D0:F4:3B:47:24:A7:7B:DD:AB
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:b9:8f:11:c1:41:1c:a1:a2:18:84:96:cb:08:f1:47:cc:
76:4a:8f:a3:64:9c:df:2a:e9:7f:fd:24:b3:ee:3c:ff:0a:40:
1f:be:5b:84:39:78:f4:47:5d:72:d6:0f:08:37:43:1b:f0:4c:
2a:65:1c:80:3c:f2:6e:4a:a5:f8:68:ca:cc:d8:3d:c8:f5:0c:
f2:8c:4c:aa:23:1e:2a:22:af:fb:d8:c6:bf:c4:9d:7f:a2:d2:
13:54:54:0a:08:04:80:d3:d4:07:c2:f4:fc:a7:e4:05:25:c6:
b2:17:d5:5f:5a:e6:2c:03:e0:48:2e:fc:62:ce:f5:c0:09:8c:
b7:ae:7e:1b:31:4e:e7:48:5c:05:93:45:d9:6a:cd:50:2f:87:
7f:a7:3b:37:89:b3:cb:dc:d0:a6:eb:73:ac:5b:96:6b:c6:2b:
f1:79:df:82:35:17:1e:a0:fd:2a:45:3f:a8:10:2f:4f:38:b0:
26:70:6b:1e:6d:a9:08:9c:cc:ec:ae:1e:92:6a:de:5c:92:0a:
84:ef:9b:43:de:45:3a:c4:aa:2d:56:84:a5:b8:32:8e:19:b2:
6a:14:86:91:ab:9f:1e:fa:cb:33:0e:10:e1:9f:40:70:c2:10:
50:72:14:57:93:e1:c6:a2:c0:d8:cd:8b:02:b7:56:90:3e:91:
93:08:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:35:32 2025 by rpki-client