Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: ZW3HEqo48cGugGwD+ljv0WxkW5l4bgyNIdEOK2cNCwA=
Subject key identifier: 0C:57:4A:05:BD:57:CC:A5:A8:8A:26:EF:0F:50:21:5A:C9:B7:C8:54
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01987C77660F4C744A616257CD716B89F8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 23:00:56 +0000
Manifest this update: Tue 05 Aug 2025 23:00:56 +0000
Manifest next update: Wed 06 Aug 2025 23:00:56 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: gLD3Y1iMr7cG4nFwrvYQyxwjTZxrwZN9T9yKbgOb/Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:66:0f:4c:74:4a:61:62:57:cd:71:6b:89:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Aug 5 23:00:56 2025 GMT
Not After : Aug 6 23:00:56 2025 GMT
Subject: CN=0c574a05bd57cca5a88a26ef0f50215ac9b7c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:c4:ed:1a:a1:86:f4:c5:31:98:01:e7:f4:
4e:ac:d0:79:6f:2b:89:a2:18:41:a9:d2:d4:51:17:
28:60:2b:7c:56:06:dc:42:6d:96:9f:e9:3d:97:79:
4e:a0:98:30:73:76:e4:5f:7d:b7:fe:a9:4d:3a:05:
96:5a:a4:dd:ca:a9:8d:8d:43:2a:79:26:97:51:d2:
49:3b:4f:58:91:a6:25:f7:ac:7e:e6:e5:1f:6f:79:
52:b9:71:b0:f7:8a:33:c8:21:c7:7b:87:a3:2c:df:
eb:98:eb:54:94:b2:5f:0f:86:d7:8c:ae:6c:4d:a9:
ca:3e:6a:96:88:90:18:69:b2:62:31:af:75:64:d6:
05:8b:d5:49:fc:0e:f8:c9:b9:c1:40:e3:1a:0a:c6:
4e:94:11:1a:b7:cc:d8:90:9b:0f:a6:97:81:92:8a:
e0:a8:b9:d7:98:f8:df:2a:9f:f9:f8:5a:32:8d:21:
c8:c8:a0:05:6b:e6:28:42:57:66:80:43:63:48:40:
0a:e8:4f:8b:4d:2b:27:17:7f:13:8f:28:f5:ef:b8:
07:3a:36:c5:d3:25:39:f2:f1:d6:4c:f1:8f:0a:4b:
48:a1:eb:68:aa:6e:d2:7d:c9:a9:b2:07:5e:a9:bb:
d4:ab:d5:47:ff:7c:e8:53:59:dd:b4:75:6b:37:5e:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:4A:05:BD:57:CC:A5:A8:8A:26:EF:0F:50:21:5A:C9:B7:C8:54
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6a:af:cf:86:94:0e:16:3a:1d:61:ff:e9:89:f4:44:e6:b4:
ca:44:04:6a:d3:5b:7d:0c:0b:6f:e6:52:5c:27:91:07:96:d0:
15:f4:8a:08:b4:fb:ea:ac:a7:67:c2:ee:5e:a5:51:11:4e:94:
0b:bc:5e:7d:05:71:bf:56:de:dd:1b:0f:95:84:ad:d0:fa:f3:
e3:78:69:3c:c0:a4:f7:9e:96:62:7a:16:db:f2:5f:37:b9:0a:
3c:1d:15:94:04:aa:78:4b:84:f2:f5:79:14:d6:ea:76:4d:bc:
ee:3f:1f:32:da:6a:1e:6a:54:87:b0:48:4b:27:22:b4:8d:28:
90:ae:6d:e7:56:df:c0:09:9d:6b:d7:2b:4b:8a:58:f5:e1:a6:
a6:e8:11:9a:b4:e0:ad:31:aa:4a:5c:b4:59:85:a5:c9:ab:10:
ff:1f:75:c5:ec:ba:be:17:b0:e1:25:40:4e:42:ab:c4:5e:99:
74:1c:dd:02:30:0b:0d:0f:24:0b:93:31:c2:ba:7f:11:2a:a9:
ac:69:d5:d7:2a:19:87:3a:7d:d9:27:35:a0:b5:04:05:50:48:
17:50:57:9b:44:9b:b1:33:be:c6:ee:32:f2:f8:81:3f:dd:3a:
6a:6b:3e:f5:81:1d:e4:df:cd:de:47:de:1a:de:36:17:77:7d:
a9:82:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:40 2025 by rpki-client