Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: +3GR2/Dg+HRncGgthLwf1ER8px2wPAgQqJhik7TQlow=
Subject key identifier: DD:E3:D9:E7:FF:AC:FE:D7:B2:5E:85:E5:B3:99:87:F0:5B:EC:18:E0
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 019873E361B7BA96CEBEAE4C5B5D070945B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 1557
Signing time: Mon 04 Aug 2025 07:02:18 +0000
Manifest this update: Mon 04 Aug 2025 07:02:18 +0000
Manifest next update: Tue 05 Aug 2025 07:02:18 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: B4q7PRq45vSImDfcPmm/cGJjmuOARBzRGye1zPDUwI8=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:61:b7:ba:96:ce:be:ae:4c:5b:5d:07:09:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Aug 4 07:02:18 2025 GMT
Not After : Aug 5 07:02:18 2025 GMT
Subject: CN=dde3d9e7ffacfed7b25e85e5b39987f05bec18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:ba:d5:f5:b0:1e:84:41:28:a6:53:fb:6f:
6d:5d:f8:aa:62:86:5c:a9:0d:f0:6f:18:31:7c:2e:
1e:b2:9a:e8:64:bb:11:6f:cb:48:1a:0a:e2:46:f4:
45:3a:37:19:f1:45:c5:fc:5d:14:3a:f0:8a:4f:e4:
b4:58:01:c6:75:93:b6:7e:c3:c7:b3:9a:b1:82:a5:
bb:bd:5b:a2:bb:0c:69:47:d3:38:78:9b:84:95:42:
d3:a5:93:c2:bd:ac:fc:4a:8a:93:ee:04:82:58:90:
15:3a:48:d4:c8:eb:2c:9c:c3:99:ad:8b:29:4c:54:
a4:78:fc:23:03:23:a4:09:1f:08:bd:b7:24:92:ad:
ff:e3:a3:c4:6e:54:45:ae:2b:0a:18:fc:15:d7:dc:
41:9f:fa:f9:e8:2e:27:50:42:87:f9:6a:5c:6b:52:
ec:35:9e:46:50:ec:23:a2:76:2c:e3:73:5f:40:9b:
1d:3c:0a:36:d5:49:34:16:5a:b1:d5:da:22:3e:6e:
d4:e9:12:50:1a:30:98:9a:5c:a2:dd:62:2e:2c:11:
eb:61:1c:86:13:33:f9:1b:a4:5c:6b:2e:b8:91:b9:
b1:a6:84:56:be:f6:9b:d4:f5:59:7e:ec:ee:5a:62:
c4:8a:41:37:8c:dd:d7:2e:1a:97:63:b6:c9:08:06:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:D9:E7:FF:AC:FE:D7:B2:5E:85:E5:B3:99:87:F0:5B:EC:18:E0
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ff:a5:ae:f8:8f:a4:74:1b:1f:e9:25:08:e6:5d:f8:fe:38:
07:af:14:8e:a1:81:9b:0f:22:3f:c1:9c:7b:ec:4a:72:1f:1d:
17:69:36:85:8d:d9:c5:d6:ac:e7:e1:86:47:9b:f7:ba:b9:aa:
31:2f:5f:66:b9:e4:b8:58:9a:12:71:77:90:5e:31:67:e9:49:
ea:dd:1f:7c:35:a6:63:b5:02:35:41:d9:21:c7:ed:0a:33:48:
22:59:4a:b3:ad:bc:ed:9f:a7:d1:2e:68:83:b0:82:c6:a6:41:
2a:1b:34:0b:df:7f:86:db:38:35:76:2f:35:f5:af:a8:27:16:
3a:43:bd:38:df:46:d6:d8:50:24:10:c1:8e:39:ff:97:5d:c9:
b6:65:b0:e5:9d:77:65:45:1c:94:54:41:55:f7:61:df:08:5b:
00:32:40:00:bb:c7:d4:40:99:22:8e:d1:73:9c:74:5d:b9:62:
6b:eb:44:17:ed:72:b4:1d:0c:f6:b2:a6:cc:83:be:94:b0:88:
16:d8:9a:ac:70:4f:49:c5:32:be:eb:f7:21:77:42:31:81:c6:
ad:80:a5:c3:f5:ad:b1:5d:1e:8a:c6:86:e8:4e:87:b5:35:c3:
25:3d:9f:cc:a7:12:bf:7e:52:60:d4:af:15:86:7c:fc:ab:4f:
a9:b6:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:40 2025 by rpki-client