Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: vKzGNNE7vew/IBmdJxdMv5Kynf7smSdQBvAmoWCQrCU=
Subject key identifier: 84:41:16:36:70:F4:FF:1E:6E:94:8F:96:43:CC:F2:1E:E5:49:9C:EF
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019872CF608D58D68027888393E08718CCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0599
Signing time: Mon 04 Aug 2025 02:00:49 +0000
Manifest this update: Mon 04 Aug 2025 02:00:49 +0000
Manifest next update: Tue 05 Aug 2025 02:00:49 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: xdxlO0RGUMCeJX8YigABIelnANfc5KOvTABGBF6rJE8=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:60:8d:58:d6:80:27:88:83:93:e0:87:18:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Aug 4 02:00:49 2025 GMT
Not After : Aug 5 02:00:49 2025 GMT
Subject: CN=8441163670f4ff1e6e948f9643ccf21ee5499cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:46:80:fc:4c:b5:b8:ba:66:12:f0:b0:e2:
e7:d7:10:bd:bc:cb:36:e0:87:36:91:5e:ea:fc:aa:
9e:ef:21:0c:23:71:ba:0e:b9:f4:08:e9:62:d9:64:
71:39:33:b8:66:13:b9:fa:77:b7:f4:9b:ec:7f:47:
25:80:b3:5c:df:81:34:22:75:bf:a8:c4:16:1f:c2:
ed:05:fc:8d:04:25:57:8a:9f:6b:da:78:bc:0d:51:
2f:11:ae:62:28:7a:94:6d:6e:bd:c2:73:67:93:c0:
6d:cc:53:72:c5:02:da:48:ee:9e:8e:50:89:85:3b:
5c:3e:e0:26:cd:01:c4:88:4d:f8:0c:6c:58:5a:dc:
92:23:8f:b8:4d:75:97:c1:74:72:53:e3:c3:b8:19:
be:95:a8:25:6d:76:99:76:f0:d2:cc:dc:16:16:ba:
00:a7:1e:89:b6:83:7a:27:77:55:b0:ad:d8:31:7a:
1f:48:e4:91:5a:08:ff:6b:84:26:ea:3a:27:49:f1:
90:83:71:49:24:8a:63:20:0e:6a:33:75:a0:f5:74:
70:35:f3:6a:da:00:29:8c:86:c0:d3:a2:f0:2b:41:
d9:50:44:15:db:fb:30:c4:55:72:9b:53:b7:77:ed:
bb:d1:25:c4:bf:a0:42:28:fc:96:71:15:5d:3d:66:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:16:36:70:F4:FF:1E:6E:94:8F:96:43:CC:F2:1E:E5:49:9C:EF
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:34:3f:18:34:b0:df:be:34:8b:16:82:28:3f:1b:b5:38:72:
54:f3:54:3d:71:1a:2e:0b:8f:cc:7c:e5:2b:56:16:04:c4:2c:
51:10:c0:80:20:e0:b0:3c:94:85:eb:d9:f6:14:5a:a9:ac:aa:
2c:eb:e4:c0:e9:fe:18:94:cf:24:f9:03:d6:73:b4:40:80:b5:
68:15:6c:a9:91:ea:f8:08:37:80:22:42:10:df:50:d6:d4:aa:
ec:79:48:8b:bd:f7:ba:6d:2d:7e:1f:1b:17:4f:d5:33:b1:51:
79:8e:a2:70:b8:14:08:a4:3b:c4:72:a8:08:15:47:44:26:02:
41:59:fb:7f:7c:89:56:9b:09:38:17:f0:5b:25:43:3c:e8:a3:
1e:7f:41:ab:b6:93:60:a4:f5:ee:6d:08:ff:59:c5:0b:bc:e7:
d6:21:58:3e:55:45:fa:40:0d:b5:1d:89:02:e1:9b:46:e5:45:
3f:8a:69:73:e3:55:ce:57:1b:b2:2d:26:d2:19:45:39:ad:e3:
0d:eb:31:e7:37:6f:a7:69:50:c3:83:a6:10:9f:2b:26:5f:96:
d6:a6:87:74:43:25:de:9a:8f:fa:5a:12:dc:c6:dc:50:60:8d:
75:f2:88:14:60:2d:b0:8a:e0:84:21:98:a4:64:cf:eb:0b:e1:
da:88:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:38 2025 by rpki-client