
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: Y+QxbtJbpKsz6uzxyT8/aBqqFA14hbo2fGpAroxqVrY=
Subject key identifier: 69:93:97:5C:A8:72:76:12:78:4F:57:54:F9:1C:93:36:90:DC:A8:6F
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01987450526649A930DCAE0E7D2FAE1B0AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:17 +0000
Manifest this update: Mon 04 Aug 2025 09:01:17 +0000
Manifest next update: Tue 05 Aug 2025 09:01:17 +0000
Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=)
2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: JgQ4wfO582yAlua85KN+STbO2TX51JkvKwg9A1ULqz4=)
3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:52:66:49:a9:30:dc:ae:0e:7d:2f:ae:1b:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Aug 4 09:01:17 2025 GMT
Not After : Aug 5 09:01:17 2025 GMT
Subject: CN=6993975ca8727612784f5754f91c933690dca86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:96:61:7b:a9:be:fe:6c:da:27:55:2d:7b:
d0:2d:e7:2f:b2:e7:48:8f:3c:54:18:2c:7a:97:e3:
4d:9c:85:0a:b8:09:33:ec:74:7e:fa:88:9d:75:b6:
d2:75:01:93:74:3e:28:2f:c0:ec:67:d7:65:56:fb:
39:71:69:78:f1:b1:08:6b:92:8b:10:96:a2:aa:87:
26:03:c0:46:e1:b5:b3:7d:b4:57:c7:5c:b9:6f:9b:
04:87:62:83:b0:a1:8f:48:26:ed:4b:42:6d:e1:a9:
8d:8f:a6:be:4b:dd:f2:8e:81:62:f4:28:0f:86:3e:
cb:b2:0a:a2:44:55:d9:94:a0:0d:2f:a6:b3:ba:ab:
18:43:e1:8f:25:d9:b3:75:bd:df:2f:35:d3:2c:1c:
c4:04:d2:f9:79:2c:fa:0a:06:73:e7:47:7d:f2:2d:
de:6c:e7:7e:a2:d5:66:a3:bc:d4:59:e8:3c:32:93:
d0:e4:f9:65:93:4d:57:bb:68:b2:3b:c8:20:e7:9b:
1e:d3:bd:ce:bf:22:c7:57:c0:cf:a4:ec:f6:d3:4d:
de:a3:a3:0e:84:fa:20:d6:40:a6:76:b5:af:4c:bc:
91:0e:8e:ea:8e:b6:93:8b:e6:9b:49:62:8c:22:9e:
69:2c:16:45:ca:a2:83:24:94:89:31:1a:09:f8:27:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:97:5C:A8:72:76:12:78:4F:57:54:F9:1C:93:36:90:DC:A8:6F
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:24:dc:bc:17:86:8d:a4:b2:ef:5b:ba:a8:2f:6d:97:9e:
d8:57:12:d4:58:e7:46:22:7e:b7:67:f9:c1:9f:86:5a:4a:a9:
d3:ba:cd:07:ea:de:9a:55:55:51:a5:e1:f1:02:d4:f1:bb:45:
cc:a9:c5:83:a4:92:7d:0d:2d:2e:aa:2c:40:7f:e1:f0:bd:02:
03:6d:8d:de:82:b7:94:84:cb:15:d2:2f:45:e0:e4:4e:1a:1c:
46:eb:fa:a1:a2:ca:95:2b:77:04:bd:aa:1f:d4:85:92:71:25:
85:8e:d3:2c:6b:9f:5e:e5:41:ac:a8:ce:b0:86:32:4f:53:fe:
e5:fe:3b:d7:e6:1a:3c:0d:25:89:c1:1d:08:e0:7c:22:63:25:
76:1c:18:fa:7c:c2:7b:63:4b:84:e1:57:d7:79:0c:e6:35:fa:
78:2f:c3:b3:06:c8:fb:3a:7c:c7:db:ed:61:01:14:af:49:b3:
e2:c8:cd:ad:cd:77:0d:82:f6:bf:da:34:fb:51:a9:e3:93:7b:
10:bc:fd:1c:1b:31:c4:33:67:a1:a4:7b:6e:a4:71:2c:f7:52:
7c:85:5a:c0:34:79:a3:ed:5b:b2:58:be:a5:49:0f:26:9e:15:
75:eb:e6:5c:6b:fe:fe:03:ea:52:7a:eb:84:81:0c:8a:7e:cf:
c7:c9:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:23 2025 by rpki-client