Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: CRmqKXcgKJ5O1uDfdHtlLSaOlCPQ9DmZEHSz+bSd7hs=
Subject key identifier: 78:B9:A0:F7:F4:42:E3:19:5F:98:EF:45:EA:92:E8:F8:C5:BB:BA:90
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 01988BB3EF94722D1497B2EEE972351D3A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 22:01:21 +0000
Manifest this update: Fri 08 Aug 2025 22:01:21 +0000
Manifest next update: Sat 09 Aug 2025 22:01:21 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: 9eCa4CljAXqXSNilr5lLuCT9GAkpYPI3n4lwJ5im9bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:ef:94:72:2d:14:97:b2:ee:e9:72:35:1d:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Aug 8 22:01:21 2025 GMT
Not After : Aug 9 22:01:21 2025 GMT
Subject: CN=78b9a0f7f442e3195f98ef45ea92e8f8c5bbba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:08:3e:bb:e3:0c:59:34:93:bb:fd:41:b8:
53:28:b1:00:5e:b3:ad:d5:35:37:14:37:48:c1:a6:
af:c4:ac:92:a2:ce:eb:6f:39:e0:b2:c5:4b:4d:a2:
58:9f:69:b9:04:59:17:d4:ed:01:63:9d:00:a8:2b:
7d:e7:dc:e9:49:9f:3b:22:eb:eb:04:45:ce:78:92:
3b:1c:83:4b:a2:b3:aa:c6:7d:ff:61:d1:5b:22:cc:
6c:86:b0:6a:ee:c0:11:77:e7:ba:9d:63:bb:c2:26:
ae:d2:72:a4:ea:23:ab:8b:92:69:44:7d:72:66:6f:
98:32:ae:97:29:3a:0b:31:94:d9:c4:d1:90:83:a0:
ad:fe:04:d8:1e:1d:28:c8:5a:5f:91:c0:b6:b8:92:
25:9a:0a:08:98:26:a8:e6:4f:3a:9f:bd:60:75:c4:
7b:19:9a:f0:c4:78:ab:fc:b6:ab:71:75:af:15:6d:
40:30:24:a2:90:da:2c:25:47:bd:c6:f2:01:4b:c8:
a5:32:90:13:83:f2:18:cd:7a:fb:cb:59:cb:b0:64:
ef:5c:eb:89:42:f3:ad:ae:6b:29:df:66:28:94:82:
de:1d:f1:b1:9f:03:f6:b2:e4:42:0f:ce:e6:68:3f:
1e:7e:b9:c3:f1:b3:10:a5:03:3c:1f:7b:db:b8:90:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:A0:F7:F4:42:E3:19:5F:98:EF:45:EA:92:E8:F8:C5:BB:BA:90
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:52:4d:1c:76:84:f1:5d:24:6d:be:ed:ca:f6:4b:39:45:
ab:c7:2e:51:f3:80:c8:91:d0:d6:ab:b2:33:a2:41:59:24:d1:
ec:38:49:6f:29:8e:11:7d:4e:8e:f9:0c:ae:19:70:e3:54:c2:
e7:5c:aa:b2:0c:96:25:05:33:96:da:8f:fa:ab:91:62:63:20:
58:ad:31:89:f0:35:9d:2b:08:c4:09:6e:c5:88:de:07:ce:c6:
71:c0:b2:5b:80:3f:86:2a:16:a1:a9:03:58:a8:39:d0:0e:d4:
ab:a8:aa:3a:50:64:c7:75:02:98:4a:bb:44:fc:d3:18:ea:4a:
36:86:1b:9d:cb:9c:46:f9:ac:06:8d:fa:61:8b:e1:3b:03:3f:
fd:ec:9c:83:67:55:62:30:98:66:c7:b3:4b:be:9d:98:7b:6f:
5f:22:aa:51:85:57:9d:3c:e5:62:04:03:b2:7f:65:a9:87:4b:
7a:6f:b8:f9:65:b5:8b:9f:3a:b5:69:bc:26:ae:c7:57:07:11:
bb:64:33:cc:49:a0:ac:7c:45:61:f8:a2:1d:71:e2:5f:5a:6f:
f2:88:47:70:e6:3f:b2:43:67:31:d4:1e:d7:49:3b:95:3d:1b:
f9:f3:c9:c2:89:67:cb:09:a2:de:e1:f2:11:2c:3f:a1:95:f7:
a7:e3:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:01 2025 by rpki-client