Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: EjXropdOyuR7T7Llg6sX1lNWrBNtzLdwG7ywgln8wpU=
Subject key identifier: 3E:72:D5:DC:91:06:69:59:A7:BB:59:5D:54:25:9F:0B:D7:7A:43:9C
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 01987486C97AED8A7A81640B643FF6B92E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:00:47 +0000
Manifest this update: Mon 04 Aug 2025 10:00:47 +0000
Manifest next update: Tue 05 Aug 2025 10:00:47 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: khAg6+WxMLLUhxV8BgxAKYPln1PsBGYSiR0WNWYuB+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c9:7a:ed:8a:7a:81:64:0b:64:3f:f6:b9:2e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Aug 4 10:00:47 2025 GMT
Not After : Aug 5 10:00:47 2025 GMT
Subject: CN=3e72d5dc91066959a7bb595d54259f0bd77a439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:e4:e3:68:c4:55:4f:0e:4f:cc:63:11:bc:
78:a7:fe:6d:35:03:2f:1b:18:63:aa:3f:e9:0a:81:
12:be:0f:20:d7:d0:1a:7f:f6:fe:a2:6c:7b:7e:e3:
5f:df:a8:33:e3:70:94:8a:8b:78:a2:b0:cd:8c:ef:
c7:51:2d:7f:b2:2f:20:85:d4:b2:ab:50:bb:0e:45:
62:8e:2d:a6:c6:09:ba:cb:df:2d:c2:80:3b:38:b5:
fb:ad:58:89:9c:07:9e:b4:00:9a:b2:29:59:90:5c:
d4:f9:68:e5:18:08:74:f0:f8:2b:63:83:e8:69:59:
1b:92:0c:38:7b:d4:30:bf:58:30:98:d1:fa:fc:a4:
bb:00:cf:24:4f:93:df:a5:66:38:6b:38:cb:c0:1f:
90:ec:3c:ae:fd:f2:7a:fa:c6:b9:4c:cf:04:62:3a:
c3:6a:9d:1d:28:1f:cd:96:15:69:86:58:cd:ff:74:
43:81:a0:99:2a:de:6f:88:06:f5:e1:e4:17:92:21:
0d:68:4d:64:02:97:eb:08:c9:60:30:ed:6f:28:e6:
0f:b1:01:34:7c:48:ef:b3:a7:67:cf:da:e0:96:27:
e9:81:91:ee:70:2a:43:c2:6d:9f:76:a8:dd:ac:30:
ea:82:74:8a:0b:d2:4d:58:3d:d9:28:1f:6c:e8:b3:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:D5:DC:91:06:69:59:A7:BB:59:5D:54:25:9F:0B:D7:7A:43:9C
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:b6:66:a9:5b:64:c7:3e:dc:c8:a2:a3:17:97:64:c2:e8:
69:9b:29:b0:f3:7e:60:7a:33:85:4f:e8:a3:a0:c5:91:ea:a4:
35:58:ea:4a:34:25:d0:f9:87:79:4c:aa:c5:87:eb:0f:f5:ff:
e7:f9:59:dc:78:84:87:1f:d8:16:be:ad:de:1c:e2:fa:6e:5f:
ba:d8:fb:0e:1f:de:96:eb:b1:17:af:ce:50:0b:5c:e7:63:ed:
8e:d8:83:87:d0:f6:f6:25:af:23:9b:d7:b1:60:e3:3f:f5:a0:
e1:79:79:84:a7:c5:ea:45:0a:40:eb:84:d2:f1:c3:6b:2d:0a:
bd:12:c1:6d:c3:aa:dd:6e:f9:09:b4:d5:ba:81:07:05:3b:62:
e3:bc:39:d1:d9:b0:e8:45:97:ed:dd:a0:0b:cb:07:ec:db:0c:
d5:27:ff:95:a2:bf:64:f0:3f:4a:43:e6:4b:0e:9e:ae:2b:7e:
6c:ca:42:70:fb:be:20:40:0a:99:02:77:15:0d:fb:c5:1e:d2:
aa:8e:1a:b2:b0:40:ef:3b:75:bd:c4:2a:37:5d:c2:cf:0d:18:
ff:23:d3:a6:7a:ed:f9:77:77:f1:18:9b:12:90:72:f8:98:c2:
12:68:9a:37:5f:67:c3:53:f3:fa:81:df:78:84:d4:74:0e:9a:
4f:24:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:12 2025 by rpki-client