Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: h7oq5EzqnuKnCGuuxpEpu9RHTCMyYJWx5LQOeoXl+bA=
Subject key identifier: 4B:77:24:A8:90:A5:E0:F5:B3:66:FF:21:C2:FC:F9:A6:1E:D3:BC:5E
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 01988BEAA7A217029B7E5BF8397D6B925B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 23:01:07 +0000
Manifest this update: Fri 08 Aug 2025 23:01:07 +0000
Manifest next update: Sat 09 Aug 2025 23:01:07 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: QhTsjr0KxPsc7jHbJPq0RTbxOHwUQAE5lEbiilf9R/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:a7:a2:17:02:9b:7e:5b:f8:39:7d:6b:92:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Aug 8 23:01:07 2025 GMT
Not After : Aug 9 23:01:07 2025 GMT
Subject: CN=4b7724a890a5e0f5b366ff21c2fcf9a61ed3bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:12:35:0e:e6:c1:4c:8d:96:21:70:dc:1d:
60:2e:d2:20:3b:af:fc:9c:bc:d8:89:de:47:6b:21:
31:c1:37:b8:14:28:76:b8:bd:0c:14:d7:ac:d9:67:
63:6c:03:2d:07:a8:af:da:47:08:37:43:5a:4b:cd:
4b:cc:31:67:be:e6:c1:66:9e:f6:43:e4:3c:bc:92:
f7:12:88:42:87:0e:1d:3b:fb:37:28:82:1b:b7:2e:
0e:dc:0d:d4:18:1c:94:b0:44:37:0f:31:f3:fb:ab:
35:dd:db:70:75:67:97:fb:6b:6f:32:30:07:2e:b7:
c4:c8:99:47:d4:68:9f:51:43:82:87:30:07:07:d3:
14:86:d0:65:0f:f9:91:10:5c:27:86:06:6e:6d:db:
39:a5:c3:6a:61:b7:8c:af:65:97:6a:eb:59:70:48:
b4:b6:93:25:41:9f:e0:a9:d5:ea:95:03:a1:3f:58:
47:1b:b2:a7:79:a5:87:56:50:09:02:d0:08:64:74:
2a:ea:04:a6:d7:a0:03:48:d2:3e:53:73:c8:46:ae:
01:b1:c6:02:85:bb:c3:a5:89:6f:86:b1:69:92:02:
5d:24:48:bc:a8:ce:07:9d:66:ac:f2:e9:e2:b0:01:
2b:5d:45:e8:00:99:41:45:31:eb:2c:5a:24:0b:f8:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:24:A8:90:A5:E0:F5:B3:66:FF:21:C2:FC:F9:A6:1E:D3:BC:5E
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:30:a5:66:62:1b:eb:6f:b0:5e:d0:af:60:3b:71:29:6d:
98:5e:f2:dc:9d:25:28:2a:00:73:3d:52:42:56:45:58:42:83:
7c:44:9b:4d:0f:14:eb:66:3d:31:12:0e:ce:fc:0e:cd:01:6f:
f3:dc:81:46:e8:1f:e1:a6:c0:4e:d8:eb:fd:00:5d:6a:4f:94:
09:78:b6:36:c6:17:7e:50:c1:a6:1c:94:4a:24:65:2b:1c:ce:
01:d0:54:12:5f:55:c5:74:ce:90:c8:f0:e1:b9:52:56:58:e5:
79:0e:75:8a:a2:5e:70:0f:c9:8b:6a:bd:02:0e:0e:10:4a:91:
ac:84:c0:5f:4c:b9:8d:62:ea:2f:d1:d4:17:bf:df:6e:3b:8c:
8d:a0:64:01:cf:07:fc:a8:8b:7b:95:17:02:a5:40:0c:b8:cf:
11:46:53:ee:35:b6:86:02:54:c9:7d:20:7a:cd:d9:a3:0f:82:
da:31:f5:98:8a:9c:d4:67:d3:16:17:ed:45:d6:d9:72:f1:96:
5f:7b:36:9f:80:25:8e:6c:f0:b0:ad:53:7d:54:2e:d7:f6:88:
27:2e:cd:a2:7b:3f:cd:9e:c6:51:05:1f:ea:54:62:dc:c0:54:
f7:41:a6:db:d8:71:8a:80:99:a7:28:07:9a:34:0a:1b:57:92:
f1:57:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:05 2025 by rpki-client