Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: 0WImpbQ+swjowI3ll9puDIbcGx9ozlUrsQt1sjGKWbs=
Subject key identifier: 0C:4F:16:B4:B1:BE:5A:5A:7A:C0:AA:ED:C6:4D:7F:55:EB:05:D1:7B
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0198925A8B096E8EBEA45029E146F25C8474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0969
Signing time: Sun 10 Aug 2025 05:01:03 +0000
Manifest this update: Sun 10 Aug 2025 05:01:03 +0000
Manifest next update: Mon 11 Aug 2025 05:01:03 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: oPdNPUci5gtZ7CrlbbrlfVuv1z+WDvm9fS3/o+MMZXo=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:8b:09:6e:8e:be:a4:50:29:e1:46:f2:5c:84:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Aug 10 05:01:03 2025 GMT
Not After : Aug 11 05:01:03 2025 GMT
Subject: CN=0c4f16b4b1be5a5a7ac0aaedc64d7f55eb05d17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:4e:f0:a6:eb:0c:fa:f2:b6:38:a7:32:3c:
49:dc:29:0e:fc:74:ee:9c:c7:91:1e:1c:6d:7e:76:
23:d4:13:62:f9:c7:ca:d1:29:0d:ac:2a:e1:e1:4b:
6e:f5:9c:dc:11:ff:70:23:c1:41:5f:7e:2f:bc:3f:
c9:fe:46:00:42:61:ab:c6:df:14:9f:8a:3e:f4:06:
4a:3b:5d:4d:49:a9:78:f4:1b:10:ed:9d:fb:0f:2f:
74:8e:8c:32:a9:22:33:c6:1a:20:08:cc:99:12:4e:
62:65:3d:8d:55:03:dc:dc:0c:f2:73:5b:95:10:f6:
ff:bd:2f:71:35:f9:7e:3b:31:7c:5d:59:30:91:b6:
c3:f0:39:e3:b3:1b:a0:1a:1f:4d:50:17:b2:88:c6:
90:02:54:16:3a:55:7f:95:00:a2:7b:32:4d:cb:36:
c0:fb:96:eb:43:4a:db:76:7c:86:04:f9:c4:25:94:
fb:a0:ed:fc:53:f3:ea:81:96:78:be:88:a7:55:06:
fb:49:f6:9a:14:c8:b4:9a:31:02:4c:9d:b1:b4:b8:
ca:e1:bd:fb:fa:3f:ad:87:71:92:61:89:ca:a7:f3:
bf:ce:d1:a8:a1:61:0a:a0:be:07:d1:1e:bd:ed:39:
10:5b:eb:8f:f9:69:27:46:a9:9b:b2:9c:6e:a4:41:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:16:B4:B1:BE:5A:5A:7A:C0:AA:ED:C6:4D:7F:55:EB:05:D1:7B
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:e2:12:14:3d:c8:3d:5e:2b:33:d2:1a:16:14:e4:92:39:
9b:59:26:42:d2:ca:0c:1c:ff:af:f6:70:92:be:8f:8f:74:30:
f9:49:ae:33:77:43:55:7f:76:84:83:ab:d0:4b:83:06:57:ab:
70:b3:9c:f2:45:9e:33:03:8b:81:c5:eb:aa:cf:9c:c7:bf:6f:
4c:a6:0e:2d:7b:5a:99:58:97:ac:c2:dd:4a:bf:62:88:0f:56:
b0:db:a4:02:2a:2a:4a:ca:4b:bb:dc:ab:2b:da:c4:8c:f5:5a:
e6:3f:92:64:77:cb:8e:e0:f4:83:1d:7e:f0:d4:3b:ad:6b:27:
39:1b:11:a2:13:3a:5b:0f:62:93:fe:cc:02:a2:0e:8b:db:80:
5e:1b:29:a5:b7:7d:fc:ce:32:54:61:69:46:e7:c2:54:d6:cb:
df:0d:af:43:d2:1f:a4:4c:9a:77:4d:12:05:6c:b7:3f:7d:80:
5a:95:18:da:e9:f3:99:8e:4e:0a:09:f5:43:7b:bb:84:36:3a:
08:85:8e:9c:15:2b:e9:25:a7:31:01:ac:d9:c6:c8:2a:f3:ef:
c9:2b:2a:79:33:65:fa:f7:fe:e0:35:25:27:dc:6b:a1:df:a1:
87:36:26:84:e9:ed:e3:11:f0:1a:24:46:24:5c:db:25:c8:d1:
4e:37:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:50 2025 by rpki-client