Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: XGxWf8GJYpSlMWYLfy8aHcFrrhRyxuzQY5pfWeuF1cw=
Subject key identifier: 62:1D:6E:A8:52:3C:E2:4C:1B:CE:2E:7A:E0:88:0A:76:82:D0:7F:0B
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01989FDF11F8DE28FCE93021CA5960D740ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 104C
Signing time: Tue 12 Aug 2025 20:00:52 +0000
Manifest this update: Tue 12 Aug 2025 20:00:52 +0000
Manifest next update: Wed 13 Aug 2025 20:00:52 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: j2ZF4f2vnziOa6pBrnNd7DvLtjw0iqOG1MTfsvjIyBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:11:f8:de:28:fc:e9:30:21:ca:59:60:d7:40:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Aug 12 20:00:52 2025 GMT
Not After : Aug 13 20:00:52 2025 GMT
Subject: CN=621d6ea8523ce24c1bce2e7ae0880a7682d07f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:99:60:61:24:df:02:1c:9a:c2:4d:9c:56:
3f:f9:ad:e7:db:e1:f1:99:57:22:f9:d8:f0:f0:8e:
85:36:7c:14:ea:e9:f2:9c:77:2a:f2:35:6c:f9:0c:
b7:4a:31:80:27:6e:fc:0e:56:15:23:90:63:e2:4c:
c7:25:7c:6f:a0:32:94:e1:97:79:1b:b4:4a:e1:ba:
f7:f1:5f:9d:5a:2d:e4:e0:44:bc:3d:d8:80:7c:ea:
68:6a:86:4c:37:42:d8:4f:80:ff:c7:ba:87:b9:8d:
91:af:20:72:95:e2:4e:b5:25:db:10:04:25:e6:f6:
db:cd:2d:6a:10:a1:13:e8:0d:af:01:1f:17:c1:c6:
38:25:0e:e3:c7:fe:e1:7c:f6:6c:46:5d:2e:f2:16:
98:2a:69:9f:d7:da:0e:06:1f:fa:b6:3c:9e:c0:32:
a0:0c:a5:48:1d:1f:f5:fd:4d:f2:ba:e9:c0:09:97:
f9:2f:cd:61:fe:54:c7:ec:f1:22:4a:77:0b:db:0f:
0a:ee:28:aa:57:0e:fc:83:64:98:b4:12:dc:0b:92:
2a:1b:d9:0b:f0:08:e1:ff:12:8e:d4:28:fc:5f:cb:
e1:c4:41:1d:e8:17:37:16:a7:ff:20:ad:70:94:3f:
38:6f:21:27:aa:bf:4e:ac:d4:cf:8f:4c:29:00:4b:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:6E:A8:52:3C:E2:4C:1B:CE:2E:7A:E0:88:0A:76:82:D0:7F:0B
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:10:34:48:02:85:30:ae:58:91:39:e5:65:50:68:ed:4a:1d:
8a:ed:1b:93:35:5a:80:33:76:ee:57:05:e4:57:8e:ed:21:04:
ed:6f:0d:4d:1f:7c:0a:d1:77:d4:12:13:7a:57:9d:bd:09:61:
c9:84:e3:91:b0:95:be:20:72:92:b4:cc:29:20:5e:6a:0b:3f:
31:69:97:c8:c7:60:46:40:d0:0a:a7:5b:ff:3f:37:86:cf:06:
a0:a0:2d:9c:6a:3c:da:6b:cc:e3:77:47:ec:bb:3b:f1:d2:d7:
27:ce:de:c3:fb:6d:23:f9:f5:93:0a:f5:97:8c:3d:14:09:e5:
a9:d6:0e:1d:00:0c:b5:fd:22:52:c9:8f:ee:37:58:d2:5a:a4:
49:3b:14:5d:f8:59:b7:8a:fd:c0:b4:38:1b:3e:9b:6e:fb:fe:
46:98:bd:3f:d0:df:4d:f7:d0:64:54:63:14:0f:8c:ad:6f:65:
66:ea:b7:fc:f3:1e:2d:4b:92:c9:9e:98:55:6f:63:32:41:82:
f5:35:b5:e3:f6:bf:9d:c5:46:83:d6:e8:ae:d4:3e:47:eb:b0:
d4:ea:d1:6b:e2:23:2b:95:f7:51:a2:72:27:f3:60:47:eb:5d:
b7:4f:73:0a:12:a7:7c:05:8c:18:42:96:fb:66:09:0b:8e:fb:
6b:00:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:05 2025 by rpki-client