Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: HaeW9zcAFidnx+hIhdzmdHkfubPt0hkQFk0Smyq2efo=
Subject key identifier: E0:DF:A3:DD:94:53:37:1C:FF:94:00:02:43:53:FE:11:4A:8E:6E:A5
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0198D473527AE35A13C225B1CD7BFB0E5408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:04 +0000
Manifest this update: Sat 23 Aug 2025 01:03:04 +0000
Manifest next update: Sun 24 Aug 2025 01:03:04 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: tUQw3p7lPIB2XsJ1r9FfSbnt/2zzMYq7OZGZG0iUCSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:52:7a:e3:5a:13:c2:25:b1:cd:7b:fb:0e:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Aug 23 01:03:04 2025 GMT
Not After : Aug 24 01:03:04 2025 GMT
Subject: CN=e0dfa3dd9453371cff9400024353fe114a8e6ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:18:06:16:83:3f:5f:9a:93:c6:5d:51:57:
a7:2b:fd:a0:a4:99:b1:49:a9:22:7c:4d:47:33:75:
0d:18:e2:26:cc:59:ca:3c:9a:e5:a6:dd:45:80:95:
78:96:08:29:07:39:ad:72:eb:a1:f3:8c:98:16:45:
a2:53:5f:23:6a:9d:b0:eb:97:6e:a2:6e:55:1f:a1:
1b:2f:42:69:0c:81:8f:a8:53:3e:3a:cd:03:f2:9f:
a2:5a:fd:75:95:06:37:70:86:ff:e1:d3:f3:27:83:
93:08:a2:85:4a:e6:29:86:d1:05:53:0d:fc:fd:80:
d3:aa:6f:37:44:77:00:7c:3e:ed:60:2d:08:79:54:
f5:93:04:90:5d:24:d3:ce:f5:34:4d:c0:87:03:9e:
fa:f5:2a:9a:c0:fd:78:04:8f:11:6b:45:19:59:f1:
54:b0:43:42:54:6a:09:1e:ef:c3:92:66:6c:01:2c:
e9:7c:b8:b5:ac:d4:f3:17:37:e4:76:9a:49:46:ee:
19:5e:ea:f3:82:45:61:7c:c2:e3:c5:48:a0:27:db:
d2:80:53:71:f3:ff:20:80:3c:0c:03:9f:79:e2:f6:
7d:1f:49:d7:87:23:d7:eb:4c:0b:67:d8:64:bc:28:
d8:11:67:25:09:8c:79:0f:6c:3a:86:d3:45:27:dc:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:A3:DD:94:53:37:1C:FF:94:00:02:43:53:FE:11:4A:8E:6E:A5
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:b8:ee:b6:36:02:32:83:3f:a7:54:6f:82:d9:5d:25:99:
da:c7:b9:68:17:e5:4f:6f:1b:0d:df:5b:05:8a:ba:ca:7e:74:
e9:9e:66:32:b3:e4:12:52:97:ef:16:e1:69:e6:0b:39:cd:95:
4d:7a:aa:80:32:50:25:9f:da:c3:ef:6e:8c:8a:62:00:6e:f5:
8d:8c:d8:9b:c4:72:c1:82:1f:ac:e9:55:88:55:e4:6f:de:2d:
ac:25:88:46:49:37:2a:bf:44:a2:d3:4e:1b:7d:7f:fc:3e:37:
cb:b4:9d:66:d2:c2:9a:eb:4c:34:f2:a0:d4:ea:a5:65:56:60:
ce:e4:c5:ac:a5:66:03:4f:46:b8:7b:4c:a9:44:07:e9:d9:5a:
f8:84:6b:10:07:ca:90:1d:82:4c:90:a7:4e:b2:89:d3:b3:2c:
ed:aa:3a:5d:4a:ef:da:0e:4a:d0:03:5e:02:2c:4a:01:91:f7:
b6:69:90:04:40:49:a6:a2:c5:d4:c6:8c:89:ba:30:c7:de:c4:
cd:8c:99:a1:3c:47:1a:df:68:20:fd:42:72:42:a3:1d:ba:39:
f5:80:28:84:be:e4:2b:ed:dc:13:3d:25:aa:d5:12:73:af:ac:
a3:1c:c1:e3:97:94:ce:f2:b5:50:65:ca:f1:5b:e8:01:56:68:
3b:bb:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:59 2025 by rpki-client