Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: QX/P04MM14LvBfeh68hEO4sbU7cBvl977ouABJDpNMw=
Subject key identifier: AA:06:0F:63:78:E3:4A:11:C2:C6:D9:F0:34:67:1E:B9:DE:AF:C6:82
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 0197D0CE201DA74744518A52E3041817B956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1083
Signing time: Thu 03 Jul 2025 15:00:58 +0000
Manifest this update: Thu 03 Jul 2025 15:00:58 +0000
Manifest next update: Fri 04 Jul 2025 15:00:58 +0000
Files and hashes: 1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 46Dspds/eeAwZdnslkm4DdGkJkPcxd1t3t/+n2IOQIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:ce:20:1d:a7:47:44:51:8a:52:e3:04:18:17:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Jul 3 15:00:58 2025 GMT
Not After : Jul 4 15:00:58 2025 GMT
Subject: CN=aa060f6378e34a11c2c6d9f034671eb9deafc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:57:2d:d9:63:9a:e3:bb:86:93:e4:d9:35:
76:28:bd:f8:f1:b3:04:07:c6:f2:f1:52:6b:7b:bd:
fc:9e:a2:3c:5e:4d:a3:cc:f2:7c:cc:44:e4:e8:d8:
86:4f:d8:ee:22:cb:88:98:3e:fc:8c:36:ca:89:9d:
7a:ed:bb:a0:b1:03:c1:17:d5:b5:8a:f6:cf:ed:b3:
32:88:f1:bd:60:84:4e:2d:1d:4b:10:32:d9:8d:cf:
45:9a:aa:40:da:f1:ec:ef:5f:7e:de:d4:36:d8:c7:
c2:34:ff:22:d6:5c:39:04:1f:de:6b:8b:47:9c:6a:
22:68:fd:c1:6a:83:11:a9:2a:e5:74:56:5f:41:b7:
2c:2b:48:fc:b9:3d:26:73:8e:77:e4:93:78:2d:8f:
94:1a:16:38:40:ec:6e:f2:ac:ec:09:3f:05:f6:e0:
23:d0:ea:5c:a5:d8:77:a1:eb:47:30:c6:c9:18:4c:
50:8d:e7:27:46:af:1b:eb:9c:4e:79:e4:17:b9:d6:
e7:1e:df:e8:2a:77:8f:ae:61:cb:46:9f:05:7c:69:
4c:1c:da:a7:ee:21:1f:a6:ed:ff:51:a8:4a:33:67:
d2:35:f7:5b:df:46:12:04:c1:23:30:fc:99:9d:d0:
d1:44:79:93:b4:d2:21:98:1f:48:2f:38:12:7f:b1:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:0F:63:78:E3:4A:11:C2:C6:D9:F0:34:67:1E:B9:DE:AF:C6:82
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:30:15:e7:21:28:68:27:41:da:0a:4c:14:b7:2f:16:7f:fe:
a7:48:1d:d9:20:7e:c4:b9:59:9a:52:d8:d0:55:a3:51:32:e9:
72:ad:cc:a6:cf:a9:44:2d:a3:51:7f:91:b3:8a:d8:1e:82:d7:
34:d4:b6:70:f0:a1:5d:70:9d:8b:27:86:e3:42:e9:2a:c0:fb:
2a:21:66:22:74:8b:af:6d:a3:9b:a5:f6:22:1b:c9:88:38:c0:
58:cb:e9:f7:9f:d0:34:1a:0a:49:5f:aa:ac:d0:ce:b5:13:a9:
9e:f8:1b:4a:fe:89:4b:f4:c9:be:71:37:66:94:cf:62:c2:9f:
59:ff:35:47:4f:9e:87:78:bd:82:8c:b4:a4:0f:41:79:86:a5:
73:50:bf:31:7e:0f:e6:1c:48:b8:5d:cb:df:86:e3:8d:be:a8:
4f:e3:0e:f0:39:76:28:8b:5f:c4:fd:ea:45:8c:2d:04:04:09:
e7:f5:ce:78:9d:ac:7f:d3:c0:b0:90:90:80:76:f3:f5:36:b2:
6d:35:4e:0a:b2:62:c4:d0:b5:ae:0a:8b:c6:1f:8b:ce:21:c3:
66:67:13:48:08:b7:8e:df:90:62:3c:23:49:0a:e4:83:dd:f5:
cb:50:bd:7b:83:f4:ec:d9:1d:2f:ac:63:bb:b6:74:93:f7:96:
ba:95:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:21:34 2025 by rpki-client