Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: IYxVR7PNEVlDqOBk98NgUmxLnahv0sxtxZVj2E5RVOg=
Subject key identifier: E9:01:4C:0D:A8:C3:D0:16:29:EF:50:7E:F9:7F:BD:78:B7:27:42:DE
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0198744FE163FF27F477A87F2D9FAC422D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: Buj4031PALBb1n4zm/cr0orLbrdfRl0iRJ8K1QrxP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e1:63:ff:27:f4:77:a8:7f:2d:9f:ac:42:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=e9014c0da8c3d01629ef507ef97fbd78b72742de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:7b:83:60:e4:0a:28:a4:08:23:12:89:1c:
99:01:49:5a:26:03:c2:1c:98:24:fb:c6:e1:f5:7d:
56:c0:40:e6:f4:d0:82:f6:c7:00:12:d6:19:ba:85:
7d:82:3d:53:96:38:94:28:ff:3d:65:23:60:86:c2:
48:b8:bf:a1:53:94:50:dd:0a:30:aa:96:41:62:86:
f7:25:91:77:0e:77:39:39:4f:1d:6c:80:65:c3:7c:
83:03:44:72:5a:40:2e:c7:d8:37:bb:ba:c3:65:17:
75:b2:f7:13:a8:34:aa:76:da:6a:97:7a:ee:88:d1:
72:fa:56:36:14:be:06:27:1e:4b:3c:fe:29:0d:74:
a2:be:94:e5:7f:7e:b8:13:9a:da:b2:36:c8:70:10:
72:ca:e3:87:31:71:a5:72:bb:cd:9d:bb:04:91:3c:
25:91:2a:25:04:ea:56:47:94:a4:50:c3:dc:ef:f3:
0c:1e:11:92:8c:95:3d:d3:e0:dc:59:be:51:f6:cc:
32:a4:bd:85:93:0e:cc:43:56:05:10:e3:23:c6:9a:
ab:7d:e8:a1:a7:4b:ad:71:aa:dd:e4:3a:5c:3b:35:
68:2d:0e:ac:90:8c:86:d9:b2:f5:41:40:79:33:2f:
34:bf:1c:79:ad:ef:68:47:80:25:52:20:95:df:eb:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:4C:0D:A8:C3:D0:16:29:EF:50:7E:F9:7F:BD:78:B7:27:42:DE
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:25:a3:02:5f:47:7c:ac:d9:d7:9d:3c:61:68:b3:13:82:37:
e0:01:71:a5:fd:c5:14:8b:3f:f8:97:51:43:f3:b3:10:0b:01:
ef:ae:8f:b8:a4:12:97:b8:f3:fa:28:6b:51:00:35:a3:36:a9:
7f:e7:d9:6b:78:f6:cc:46:7b:de:1a:53:1f:af:75:f9:4c:13:
c2:17:bb:3f:b9:94:74:78:de:2d:ae:c5:f2:79:cb:f6:3f:33:
0a:f1:48:c2:01:aa:c4:c1:7f:ad:7c:b7:de:03:9b:5a:38:b7:
bc:74:2d:fb:48:e6:52:77:65:b1:49:0c:28:2f:da:7a:4a:34:
50:f9:84:e2:2e:8d:4d:02:08:d6:a8:97:4a:d9:18:e8:1e:93:
cd:ae:8f:28:7a:73:f5:91:93:d8:76:94:26:df:b4:1d:03:84:
04:1a:ae:6c:cf:93:b9:02:b5:97:7c:8f:ec:b4:9f:47:a3:7d:
bb:19:00:31:3d:24:ca:1e:c7:5f:4a:ce:ea:bd:a9:b5:ef:86:
6e:9a:43:d8:04:55:dc:c3:9c:af:5e:6b:ad:ec:69:ec:29:1c:
36:2c:28:f2:c2:d9:b4:38:60:b3:b4:c1:54:40:6c:a3:94:11:
dd:11:90:b1:3c:ef:be:19:e2:94:fd:77:d5:2d:6f:a0:38:6d:
d6:95:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:50 2025 by rpki-client