Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: mlIsaOprYGL5kBGwp25MEB2v/5Vy1Vhxi4ZciPOrqic=
Subject key identifier: 90:03:58:F9:84:D8:AE:01:2C:8E:DF:B4:F4:79:AF:F1:CD:A5:86:DA
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 01989780ACF594D056F7B37A130C088EC86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 05:00:49 +0000
Manifest this update: Mon 11 Aug 2025 05:00:49 +0000
Manifest next update: Tue 12 Aug 2025 05:00:49 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: ItIumE4UewShW3/3zK5L9PLzpNK+i2bL9C5Bqxpd2JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:ac:f5:94:d0:56:f7:b3:7a:13:0c:08:8e:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Aug 11 05:00:49 2025 GMT
Not After : Aug 12 05:00:49 2025 GMT
Subject: CN=900358f984d8ae012c8edfb4f479aff1cda586da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:6b:8c:ab:da:99:e3:49:31:55:36:c8:c0:
19:02:f7:ab:f6:3d:72:62:84:7e:46:fa:0e:95:81:
a3:0d:30:84:a3:ca:d7:c8:29:9a:7a:11:f9:37:54:
d5:fe:73:0f:9b:85:e1:c2:a1:47:3c:6e:ec:55:25:
0b:a4:a1:11:af:19:0d:48:56:d7:8e:e9:aa:9d:ad:
23:fe:66:71:b2:b7:24:c2:cc:6e:67:50:08:8f:0f:
7e:99:e2:bb:47:c7:0a:c7:4e:ed:35:78:48:be:9a:
39:d2:e6:30:ee:50:78:fd:1b:dd:0f:04:34:ee:8b:
11:3a:c7:bc:52:29:43:62:86:5c:66:c8:3e:74:7f:
b8:fb:57:c0:aa:bb:81:97:bf:50:e6:0f:78:51:1a:
6e:50:27:11:60:df:25:3a:bc:18:02:c0:cc:b5:83:
97:c5:e0:f3:c0:78:9b:93:4c:a9:9d:24:d1:ba:a0:
98:e9:11:bf:60:b5:80:b9:05:f6:14:18:6d:fd:ea:
61:2b:23:5e:84:c4:80:38:88:a3:63:5b:8b:94:c9:
bc:3f:49:39:62:6b:59:84:20:ef:59:db:28:22:45:
1e:d6:be:04:20:e7:01:aa:e4:2b:34:3f:95:66:99:
19:3a:95:c6:f3:0b:40:bd:51:e6:2e:22:c4:32:da:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:58:F9:84:D8:AE:01:2C:8E:DF:B4:F4:79:AF:F1:CD:A5:86:DA
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:56:47:2d:32:85:58:02:5e:5a:68:f5:b3:97:62:e3:ae:49:
4e:8b:ea:d1:b2:d2:40:e9:30:2f:ca:3e:1f:6f:c5:6b:7f:2f:
0f:fc:80:63:16:f4:e6:65:e3:ff:d7:2b:f1:45:fe:71:80:0a:
3c:92:ca:39:58:46:0a:12:a8:3d:18:fb:f4:49:9b:72:45:39:
e5:11:e2:16:9f:fc:ef:f5:9b:0e:dc:6c:ca:02:ee:1c:98:3b:
af:6c:b6:44:d4:44:39:09:d5:07:da:fa:b2:93:09:c7:cb:81:
39:f2:42:ab:50:93:b5:67:88:a0:ca:be:24:7e:c7:27:75:4b:
1c:1a:57:a8:a4:c4:4e:83:6a:9b:ce:94:26:d9:11:4e:95:da:
38:96:bb:b1:17:af:3b:09:4e:e1:1c:6c:21:1a:33:61:f2:b6:
fb:93:c5:06:a9:d2:cc:24:ac:91:b6:9f:1c:11:e4:e1:2d:23:
0a:ef:51:8f:47:95:c7:67:b9:f1:50:0e:38:37:5c:64:81:ab:
4e:82:f3:a4:61:4a:08:31:3c:ad:9c:b3:a8:10:71:55:6c:4b:
bf:1f:91:be:6d:d6:ca:45:c0:9b:8c:b3:b3:f6:fb:eb:9d:c1:
1a:36:21:43:3d:97:83:e2:b2:d1:60:a3:10:3b:27:36:e9:02:
85:be:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:29:58 2025 by rpki-client