Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 5LoJvD1twkM/T4pRWTnjwQSl/Bwb4RFJxhF50ffB1VQ=
Subject key identifier: 86:F6:66:EE:CA:4F:DD:45:F7:71:B2:69:66:55:B6:1B:EF:89:48:9D
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019873E305BF97725DFC1F2118FCE0FC5089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: IMxZLD3nuw45EGe8oJve6V7MscOXor056YFnPiYjrTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:05:bf:97:72:5d:fc:1f:21:18:fc:e0:fc:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=86f666eeca4fdd45f771b2696655b61bef89489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:3b:69:ad:a7:b5:69:1f:b2:bc:55:ac:54:
f1:16:61:e1:12:ca:d0:a4:37:5b:22:28:95:f3:35:
01:88:b7:53:72:fa:7d:4f:eb:07:6d:8d:43:46:c6:
b8:bb:44:6e:c8:76:2b:00:aa:37:c5:af:f2:ce:e5:
52:e0:65:f5:e5:91:9c:53:6f:66:2a:c5:85:d3:8b:
ee:59:c2:cd:bb:40:42:4a:a4:1c:c3:f4:58:65:99:
cd:a3:32:98:db:9e:d6:fe:c0:71:8b:22:63:08:61:
d1:0d:f7:97:d1:aa:90:89:f1:90:f6:45:b6:fc:65:
4a:1c:4d:d4:1c:e6:76:9d:35:2d:61:47:0a:7f:30:
19:a5:93:4d:50:5f:e6:d7:64:15:d2:9b:7a:64:9e:
e2:30:7e:61:45:bf:63:ae:69:14:a8:1f:6c:12:8c:
0e:63:dd:1b:b1:d7:1b:41:21:b5:64:14:8e:f6:43:
a4:85:08:49:eb:13:e0:a0:12:f4:c6:e1:4b:89:15:
05:61:a9:1c:90:19:02:8c:17:7d:44:0f:45:28:29:
5a:13:1f:9f:f0:ca:59:02:b1:b3:9d:cc:3c:8d:df:
aa:bc:b0:9b:eb:51:7b:4a:8a:c3:41:2b:31:d1:08:
aa:0e:3f:b7:38:d0:a0:0d:89:24:2f:61:39:82:83:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:66:EE:CA:4F:DD:45:F7:71:B2:69:66:55:B6:1B:EF:89:48:9D
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:7e:da:97:d7:fe:d6:00:1c:ae:ed:35:0f:ab:7c:0c:a6:
f3:f4:d0:b9:a9:03:28:7b:89:4b:dd:66:cd:b2:82:49:84:8b:
f7:40:4e:31:ff:c0:7a:5d:1a:fc:54:ba:6a:3b:a4:c6:ba:47:
d0:fb:0d:74:4c:ba:2a:07:6f:55:9a:94:ab:21:e5:29:15:d1:
2c:db:39:40:b3:73:54:1b:6f:fe:e4:3f:8b:68:a6:4c:2a:f4:
b6:d9:43:ff:ca:8c:2e:77:20:ea:96:39:28:9c:1e:26:b7:96:
ef:cd:86:08:e7:77:06:27:35:7c:b3:7e:fd:c7:1e:35:7c:2d:
50:3e:0d:ef:0a:e8:6f:e8:05:ff:f3:1a:17:03:35:b6:c9:6e:
85:83:1a:dc:0a:e3:f1:a1:09:cc:42:1a:9a:51:56:23:6a:ae:
be:bd:e1:9e:24:dd:71:09:6f:42:1f:b3:2f:8a:f8:84:17:15:
0d:a7:ba:d3:0f:d8:79:61:6e:0e:80:2f:d3:53:f8:9d:a2:a6:
8b:03:62:7f:d5:f0:45:44:b0:ad:bd:08:21:8e:76:a7:89:88:
5d:7c:4c:e2:c0:d4:1c:8d:ef:98:f9:58:76:d1:61:5e:0b:28:
55:9c:ab:c9:3e:fb:b4:61:4e:fc:f6:07:ee:45:05:e1:53:19:
a7:27:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:46 2025 by rpki-client