Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier: eHLYwgf8/O8ZfQLO9TzAaoZdU/oJRVSs1pLh6EWXuKk=
Subject key identifier: C5:E2:46:60:3C:23:15:E0:D1:4E:CF:FB:7E:B2:95:AB:4A:A4:DE:69
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer: /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial: 0197CB70E8DF3627559201C3D48AEE7B8044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number: 0CA7
Signing time: Wed 02 Jul 2025 14:01:03 +0000
Manifest this update: Wed 02 Jul 2025 14:01:03 +0000
Manifest next update: Thu 03 Jul 2025 14:01:03 +0000
Files and hashes: 1: 2DOh93abUDEP7iIvARNzO8Baro0.roa (hash: Z/CdPO3BFU4U75w3sjAjZS7oL1oIaDik0hINZ7FE5ak=)
2: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
3: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: /+d00KkRzu0hTVG7eafEKt1vMYNRxQ9IyMjmUYpH0s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:e8:df:36:27:55:92:01:c3:d4:8a:ee:7b:80:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Validity
Not Before: Jul 2 14:01:03 2025 GMT
Not After : Jul 3 14:01:03 2025 GMT
Subject: CN=c5e246603c2315e0d14ecffb7eb295ab4aa4de69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:a0:85:00:89:09:6c:89:e9:98:c6:64:62:
00:c1:0a:10:9f:9d:89:9a:69:a2:a4:d7:be:14:07:
02:ed:24:d1:8f:7f:2b:dd:5d:9d:d9:e1:8f:7f:8f:
87:b2:35:3a:c0:70:ce:55:eb:c6:72:11:f0:1e:4c:
23:b8:47:ab:c3:64:bd:92:21:c3:df:ed:83:7c:32:
1a:e7:63:c5:be:6b:07:18:68:11:bb:56:bd:89:77:
49:fc:4b:9c:ea:9f:de:3a:f6:1f:0e:e3:10:cb:46:
3a:21:21:f6:79:68:1a:5b:16:76:10:69:b8:41:f3:
4b:a4:c6:e0:52:32:03:98:f1:c4:93:ee:28:84:b8:
98:6c:e3:3d:29:07:19:0b:57:09:b6:60:53:5d:b8:
08:83:80:89:2c:86:ef:40:ee:3d:cb:18:4a:6e:62:
90:2e:4d:80:85:7a:db:19:2f:fe:f4:d4:76:6b:03:
76:27:40:cc:2d:73:10:cf:a7:0c:43:c9:f3:09:d8:
fb:c9:cf:af:d0:ae:03:9f:6e:9f:ec:8e:ae:66:65:
a8:11:88:42:63:b7:e1:33:f4:08:dc:6f:8d:cf:d9:
49:bf:c3:ce:fb:1d:3a:ce:76:49:60:a9:be:a0:c0:
d8:1e:b3:9b:4b:8f:fe:25:c1:2f:0f:44:6c:bc:b6:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:46:60:3C:23:15:E0:D1:4E:CF:FB:7E:B2:95:AB:4A:A4:DE:69
X509v3 Authority Key Identifier:
keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:9b:77:f6:f2:0a:63:d8:d5:4f:f9:22:aa:48:69:85:05:
eb:6b:5c:f7:91:89:38:38:f8:83:5a:74:7e:a2:0f:42:b9:ae:
ce:bd:bf:21:ec:6b:8b:36:df:67:03:54:98:53:0b:12:62:e1:
b6:e5:62:a8:24:dd:f8:9e:49:f0:f4:6f:f6:1b:93:3a:a5:ee:
f6:49:b8:97:7a:33:2a:d2:9c:a9:c0:9d:94:0e:a1:3d:54:4d:
c9:57:3e:70:26:94:4b:58:fb:db:a9:bb:18:df:9b:5e:01:16:
d5:a5:3f:92:9a:a6:f7:98:4d:d7:d3:0c:66:7e:36:b0:4d:1b:
41:ef:bb:53:b4:9b:46:ef:b1:af:8f:5b:07:62:cb:84:c8:70:
32:21:4d:73:91:61:68:d0:ad:d4:d8:df:47:94:fd:f0:a0:a8:
28:00:ea:c5:01:68:bd:9d:a4:de:82:7a:a3:a6:ac:35:7d:95:
d7:c8:b7:eb:1e:af:f2:ff:1b:b1:c6:2a:e3:2e:ef:6b:06:28:
05:35:86:f6:c6:d2:da:44:97:42:d7:92:85:c5:f0:c6:be:2d:
82:dd:b4:b9:0e:5d:a8:11:2e:fc:e6:2a:d6:79:fd:1b:79:4d:
a4:81:dc:b0:0c:93:73:e6:72:22:da:f3:ca:3b:b2:6c:b4:d1:
ea:aa:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:17:09 2025 by rpki-client