Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: lC27/S3KPKtxMDOJv8oelXAsWjAc4K3kn/Oiw8YNjCY=
Subject key identifier: BD:65:16:21:F9:9B:66:2B:EE:4F:C9:68:33:E6:CC:B4:62:66:16:31
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 019873E36ECC4E4682F3CBCCA5717A369313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:02:21 +0000
Manifest this update: Mon 04 Aug 2025 07:02:21 +0000
Manifest next update: Tue 05 Aug 2025 07:02:21 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: hH3q+PpxUUk3jqCSkMiw4eO2lUUYUqkavrMqY6/u/oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6e:cc:4e:46:82:f3:cb:cc:a5:71:7a:36:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Aug 4 07:02:21 2025 GMT
Not After : Aug 5 07:02:21 2025 GMT
Subject: CN=bd651621f99b662bee4fc96833e6ccb462661631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:5f:84:60:f9:50:0f:0f:67:6f:6d:a7:f6:
d3:35:c8:06:59:48:a8:3b:4d:8b:3a:f8:ea:2e:74:
0a:8b:95:9c:7d:dd:f6:d9:44:7d:46:85:e9:09:ff:
1d:68:dc:bc:ec:fc:93:7f:fb:77:6c:8a:93:3a:c9:
79:0b:19:83:81:a5:25:52:0a:c1:c8:3b:5f:27:c0:
08:72:2f:7b:f7:9f:89:57:48:ee:21:cb:01:62:06:
54:84:a7:ac:ac:6e:8b:8a:d0:b4:dd:b3:d8:f0:77:
b5:fb:33:9b:e3:85:d6:9f:1e:7a:a8:df:54:a1:a2:
45:2c:ff:01:48:91:89:9b:1f:7b:37:48:91:14:ba:
64:fe:43:54:68:3f:9b:10:90:54:f7:ba:8e:34:a4:
50:f0:9d:b7:44:3e:fe:a9:39:22:9f:ed:cb:73:59:
8e:c7:00:d1:14:26:d3:8d:1f:8e:ad:25:c3:a5:77:
59:0f:d6:b5:de:b1:00:ed:d6:37:8f:db:4f:65:2d:
c7:16:0b:57:7d:5f:3a:29:74:5f:08:76:43:c8:e8:
e4:01:98:41:e9:10:a7:35:ab:9d:f4:63:c7:ab:e3:
c5:d0:4b:cf:ed:14:01:e0:32:3b:a3:43:ed:21:ef:
77:1e:22:f9:61:c6:e3:72:9c:d1:24:b5:00:b4:4d:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:16:21:F9:9B:66:2B:EE:4F:C9:68:33:E6:CC:B4:62:66:16:31
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:34:3e:26:7f:c8:fb:63:d1:a0:f2:c8:3a:d1:d5:d4:f6:16:
41:3f:13:5e:2e:d1:fa:d8:51:c2:cf:e9:8f:68:79:4b:d2:98:
19:7e:d8:53:f5:51:4e:23:48:4f:eb:48:f7:a2:52:86:4d:13:
ab:2b:60:5a:77:33:52:77:5b:3c:c3:81:2b:4c:35:cb:47:43:
d5:e9:46:1d:b8:44:8a:de:5a:da:bc:24:f5:8b:c0:c9:27:b0:
60:77:e7:46:43:d4:23:16:37:89:8f:38:17:d6:8a:e0:63:77:
f5:c5:1a:c7:30:ed:d4:34:85:93:c9:4d:a9:84:09:48:5d:7d:
14:0b:ac:65:e9:03:bb:38:43:ec:34:8d:60:04:e3:97:68:79:
05:ea:00:73:6a:c1:d1:2c:52:b7:0f:ea:5a:d6:47:6f:7d:62:
3b:4b:6c:0a:d7:dc:7d:0f:13:8c:4b:05:97:96:fe:1f:56:59:
79:12:e4:49:cf:62:e7:82:f9:16:44:84:97:40:1d:47:ca:9b:
14:e6:98:16:76:7b:94:14:bb:12:cc:31:15:6e:08:49:01:89:
45:74:bc:ee:4e:91:0b:f5:d7:f4:65:46:53:43:4c:45:46:2f:
39:87:ab:4d:26:71:92:85:af:7b:7a:13:d2:d5:a8:bc:c9:10:
f6:b0:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:23 2025 by rpki-client