Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: CiAkwlTjdoIRc7gwIl45LoXqE+IsSyKOeC3I0jYvpvQ=
Subject key identifier: 39:E9:71:7F:D4:92:02:5D:3F:4E:DD:EC:96:DE:77:00:23:DD:F2:FA
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0198808B26C02D633961BF37288C9E80E8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0A85
Signing time: Wed 06 Aug 2025 18:00:59 +0000
Manifest this update: Wed 06 Aug 2025 18:00:59 +0000
Manifest next update: Thu 07 Aug 2025 18:00:59 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: 8UvzMRdjr0o/PwB/RnufGQOT3/KrmqtVK4jmM7xDDg8=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:26:c0:2d:63:39:61:bf:37:28:8c:9e:80:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Aug 6 18:00:59 2025 GMT
Not After : Aug 7 18:00:59 2025 GMT
Subject: CN=39e9717fd492025d3f4eddec96de770023ddf2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:0a:2e:d6:b2:46:3a:f2:8f:78:17:bf:06:
f0:ab:3d:62:0f:56:01:ba:04:90:d4:e7:8e:3d:11:
38:16:88:d7:73:e1:9f:86:78:c4:83:82:29:29:c0:
52:9e:51:20:3c:03:67:ad:20:72:ae:54:e3:5a:95:
c6:79:1a:31:31:b3:f7:20:86:d4:fe:f3:64:f7:e0:
3b:aa:1c:3e:51:ff:fc:20:00:a0:b7:9d:13:60:a9:
2e:7b:c6:05:cf:79:b5:fb:9f:e2:ec:cc:6b:65:1c:
91:78:ca:3a:87:5a:f2:dc:30:7f:28:3b:a4:93:85:
79:96:d8:55:40:10:d1:08:84:6e:ce:c0:14:ee:0e:
e4:66:f7:43:85:ba:e9:96:dc:1a:f2:61:59:59:22:
a5:fa:72:07:6a:8f:29:f8:59:7b:54:00:da:d3:a9:
6c:ae:80:dc:95:26:0f:43:39:60:46:cb:1e:87:7a:
79:84:7d:f1:ff:e6:f7:ad:9f:41:38:59:91:86:8f:
46:67:39:81:14:ea:13:cd:80:f1:81:5b:79:3b:e8:
a0:8b:af:eb:4e:eb:5d:aa:53:ab:27:f2:36:28:4f:
00:51:0a:60:69:56:ac:37:41:f7:2a:ab:a6:18:0a:
78:d0:d7:42:24:3c:22:02:f6:bc:e9:d3:4f:70:e7:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:71:7F:D4:92:02:5D:3F:4E:DD:EC:96:DE:77:00:23:DD:F2:FA
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:57:be:e3:f2:12:8c:c7:4b:89:6b:06:dd:b3:98:1e:52:
ba:e5:a7:2d:4f:90:91:50:37:0a:3a:75:e6:f9:cd:4f:0e:e4:
d7:10:0a:31:71:be:22:b0:98:49:04:ed:f2:9a:f6:09:21:34:
4f:ce:e4:ce:22:f2:95:c7:a5:ed:d5:d7:7b:80:fc:30:8f:fb:
11:86:2b:aa:68:b4:e7:b8:cd:84:66:1a:32:e5:dd:f9:c9:28:
43:62:4e:b1:45:d9:a3:2f:f1:3f:1f:e8:bc:58:19:a0:13:26:
09:21:a8:c5:f9:07:4a:14:aa:a5:25:8a:b4:eb:11:1b:c8:2b:
8e:ff:73:96:2c:df:e3:c1:c2:32:c9:86:a5:b1:15:e2:b9:a5:
b3:b7:98:fa:0f:46:ed:db:f9:db:12:65:a4:4f:89:bf:f3:93:
b8:d8:8b:d3:9c:16:ec:87:69:64:65:c5:d9:4a:69:37:e6:bb:
16:68:71:d2:bc:fa:1e:fc:ed:e7:da:59:16:c4:2d:a9:e1:15:
45:f8:fe:37:b0:95:f4:d6:d7:1d:b4:b4:c0:38:2c:f5:65:66:
dd:fd:63:db:96:8c:e5:2c:f1:0f:f5:d6:14:ab:24:1e:34:45:
39:bf:b7:8d:6e:ce:a0:bd:19:0c:11:8f:29:f8:23:0b:ad:73:
11:92:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:46 2025 by rpki-client