Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: di2WsyU9eE5Z+rwDboaJcNEjNln3ovlPPRGNc1X74/k=
Subject key identifier: 76:C1:E9:4D:0A:A4:D1:F6:DD:77:92:CD:B7:DE:3C:36:6B:32:FD:A0
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01987450070FB92AAF25D022C11CAD030DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1622
Signing time: Mon 04 Aug 2025 09:00:58 +0000
Manifest this update: Mon 04 Aug 2025 09:00:58 +0000
Manifest next update: Tue 05 Aug 2025 09:00:58 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: WtOaAE1Vk8IuEslwSgLgvhIL//Pa5mDxEGEPWV5uFfE=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:07:0f:b9:2a:af:25:d0:22:c1:1c:ad:03:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Aug 4 09:00:58 2025 GMT
Not After : Aug 5 09:00:58 2025 GMT
Subject: CN=76c1e94d0aa4d1f6dd7792cdb7de3c366b32fda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:ee:f2:90:4f:18:36:80:ea:fc:35:ac:9c:
25:43:25:e5:45:1b:f6:d7:6e:55:c4:0f:65:1b:3d:
52:1e:55:85:51:91:61:b6:70:9f:a0:af:f2:15:47:
76:90:4f:16:55:55:14:81:cc:53:79:40:75:d1:a4:
df:23:4e:15:52:45:a5:60:7f:38:74:76:03:cc:ca:
f9:64:32:12:15:3e:98:5a:8b:67:e4:34:94:0d:aa:
26:cc:08:8b:4e:38:2b:82:96:e9:06:0e:61:b8:c4:
bf:0e:be:50:81:06:a9:59:6d:f6:8e:6c:18:23:56:
a3:92:04:1e:06:6e:dd:7a:94:81:f9:54:67:12:26:
c2:28:88:43:50:a2:7d:8e:3a:84:12:4d:3e:1f:c9:
ab:cf:13:86:94:c5:39:2a:cb:4a:2c:08:5a:2c:c8:
28:c8:66:42:94:45:17:95:84:fa:e5:20:72:78:cc:
a3:80:ba:ed:71:e7:2c:7a:1e:56:48:b1:92:62:83:
62:be:52:0b:1d:c5:56:66:33:14:e6:14:f1:8d:b7:
d8:a4:70:7e:d1:59:80:3b:bb:4b:47:e1:aa:f2:9f:
4a:b9:14:8e:12:60:52:2a:25:6b:4c:07:67:4f:a3:
5e:cb:2f:89:d5:2a:01:1a:42:9a:5d:6a:ec:c6:a8:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:E9:4D:0A:A4:D1:F6:DD:77:92:CD:B7:DE:3C:36:6B:32:FD:A0
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:90:66:c1:fe:47:da:2f:c6:82:95:08:14:2b:00:f8:fe:
e1:b0:0e:cf:54:31:db:d5:11:eb:ee:bd:f9:90:78:7f:42:9c:
45:39:a5:11:06:fe:7f:03:74:36:47:c8:bd:64:b7:28:71:ff:
10:21:a3:ad:74:6a:e7:cf:a4:39:66:60:37:bd:e5:5b:74:d6:
d4:c1:0e:f3:e8:fc:40:ac:05:c3:c9:36:bf:fd:04:1f:49:c0:
39:d6:56:70:66:6a:38:66:46:3a:77:c4:83:ea:93:b2:2e:e8:
4b:1c:ef:b0:77:68:c7:49:34:f7:35:01:7a:cb:37:b3:e4:aa:
09:af:d9:c3:60:fe:fd:8e:c2:88:74:42:51:54:00:c5:96:be:
10:d1:0c:d7:3c:bf:41:e9:6d:ef:ec:a2:7c:4c:c1:ba:a3:0b:
33:ad:d6:ba:7c:c0:92:01:c3:40:a8:e8:d6:03:88:d9:b8:99:
a9:73:a9:9f:48:09:cc:b5:dd:f7:d0:89:e2:35:e3:a4:df:f3:
d7:47:11:4b:03:1d:9e:1a:63:de:91:0a:ac:d3:d6:85:a8:b3:
44:3b:04:8b:b7:73:0a:34:e8:7b:79:fc:5d:22:ca:a6:c2:bd:
25:62:ad:4d:11:2f:d3:bc:c6:94:00:87:73:a3:80:36:cd:3e:
ce:6c:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:05 2025 by rpki-client