Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 1p0jmqIUGIrQZlCEwhwnXw9IrTsMmr+y4RYwumZawjQ=
Subject key identifier: 30:F2:53:2E:D6:EA:AA:FD:00:C3:65:18:62:57:10:20:00:E3:39:AD
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 0198D6CD51C31B98AEE78067BA29525AEB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 1311
Signing time: Sat 23 Aug 2025 12:00:36 +0000
Manifest this update: Sat 23 Aug 2025 12:00:36 +0000
Manifest next update: Sun 24 Aug 2025 12:00:36 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: hLmOPI9iG82BZ3m0oNNZFza7sqWchc6kVYX7pMLbVA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:51:c3:1b:98:ae:e7:80:67:ba:29:52:5a:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Aug 23 12:00:36 2025 GMT
Not After : Aug 24 12:00:36 2025 GMT
Subject: CN=30f2532ed6eaaafd00c365186257102000e339ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:1f:4c:99:6f:f6:bd:87:e0:e5:58:47:5b:
e9:a4:bb:82:f7:a5:14:d4:5e:d0:f0:22:23:09:07:
da:ab:ce:6f:2a:6f:26:64:93:ca:c2:49:41:98:b5:
dd:31:6d:01:24:e4:09:97:5e:93:ba:06:8b:e5:78:
4d:96:fd:bf:91:76:16:32:77:49:4a:24:b3:7c:3e:
4b:6c:4d:01:04:66:3f:e1:5a:b0:7e:18:cc:4f:4d:
4b:67:7b:00:7a:71:9e:49:4d:c3:fc:b2:d3:52:51:
bc:0f:e4:93:b5:9c:80:d5:a2:e4:9b:38:75:e5:1b:
fc:0b:41:5b:91:d4:77:e4:15:9b:8d:d3:d0:47:5f:
20:e2:df:a1:c0:42:c0:65:54:db:b3:a5:c5:22:35:
87:20:95:27:d2:60:de:79:a5:92:5f:f0:2e:f8:5a:
d3:c0:d6:9a:a3:84:39:f9:0f:f6:59:ae:ff:8c:94:
af:a4:80:75:31:2c:9b:93:bf:79:fb:e7:ee:a4:d8:
72:d0:59:35:15:88:9e:79:73:03:97:be:88:94:39:
4a:90:37:cd:4d:a7:0c:0d:e7:20:04:ab:b9:a4:bc:
fb:7d:5c:e9:28:23:59:00:f6:fe:b6:b4:45:09:62:
15:88:ef:02:39:f5:42:ae:a3:c6:ae:d8:6b:37:89:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:53:2E:D6:EA:AA:FD:00:C3:65:18:62:57:10:20:00:E3:39:AD
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:29:b0:12:fe:e4:2d:2a:ae:9b:04:c8:f4:4e:15:fa:35:c7:
98:5b:d1:21:56:97:d4:84:1e:ff:90:a5:11:f4:35:24:7c:b0:
24:aa:3e:56:b7:66:a6:48:fe:b8:bc:7e:82:ee:c2:12:b2:66:
2d:c7:24:89:1b:09:18:37:07:c0:09:5a:19:21:87:7e:fc:1d:
bf:69:97:9d:42:a5:57:8d:16:4c:de:ca:7f:af:55:b7:8d:a5:
67:6e:2c:5c:8a:2f:af:2a:65:43:ac:e6:0e:9c:64:36:60:c3:
9b:f9:ea:47:14:41:bb:74:c0:33:f1:c3:01:46:7e:59:b6:59:
71:4d:7f:40:de:1d:f8:2e:74:09:d5:28:96:4e:9d:88:ee:ff:
aa:a5:b6:2d:4a:b4:36:07:bb:f0:01:c6:fd:35:81:e1:8b:b2:
22:9b:b3:e0:44:4f:a9:ef:64:7a:7b:34:20:02:90:df:55:ec:
0b:fa:37:ae:40:55:66:4b:66:df:f9:31:57:10:d1:f1:b4:0a:
fe:50:3c:7a:5a:05:d0:4a:63:69:e7:08:44:69:17:03:cf:4b:
3f:22:24:bb:70:15:15:f1:82:4f:8f:d1:f6:5b:a0:fd:74:ee:
c0:bb:71:21:0e:15:1f:9a:90:c6:e2:bb:0b:54:ee:b6:e2:c9:
f5:bf:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:59 2025 by rpki-client