Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: hEVxb/HqUFJBWU/dR0EHjXSBPXJ6aYoVbhAFD/SLIkw=
Subject key identifier: 55:CD:74:5D:2A:8F:AF:8A:D5:4F:94:AA:0B:8B:97:F9:BA:5D:13:91
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0198D5BC0CB90C14673DD65E57211B350754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0E66
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: XLLRZ9sDswSPcRVmXpEDwd5zWW6O15CcsE8BUhyFYQo=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0c:b9:0c:14:67:3d:d6:5e:57:21:1b:35:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=55cd745d2a8faf8ad54f94aa0b8b97f9ba5d1391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:8e:70:72:59:a2:ec:34:b6:55:08:ba:67:
15:64:aa:3f:07:dc:dc:2b:55:f3:79:9d:f1:65:35:
b8:18:fd:3b:86:c4:89:41:db:0a:e9:4f:e7:71:df:
b0:33:cc:de:69:27:2c:8f:5d:2c:7a:74:31:d2:9c:
2b:6f:3c:e8:7a:7d:34:68:00:b6:4c:66:d1:90:80:
40:94:ae:25:2d:df:31:c3:41:69:e9:f4:8b:47:2c:
65:7f:31:5f:64:65:a8:77:40:15:76:9a:c1:36:3a:
cf:e5:b5:78:37:ff:99:fa:b7:15:9c:f7:3d:b9:40:
0a:03:7f:e4:80:ff:db:88:7a:bd:0a:a7:26:7b:bd:
68:8c:06:6c:c7:01:74:43:7c:02:2e:92:c0:6b:c3:
c0:78:a7:89:8c:30:27:1b:18:5a:e1:6f:1e:64:2c:
5a:eb:23:40:8e:3b:ad:a7:bf:7a:2f:20:34:a2:be:
fe:7d:eb:ff:9d:dc:08:23:33:74:52:a1:29:5c:9e:
a6:26:b4:66:2d:31:33:59:29:59:ff:3a:fb:22:c5:
39:c2:63:1f:b9:b8:f0:24:05:c6:49:02:b9:f3:80:
a6:26:be:0f:e3:ad:04:13:ed:3e:04:8e:2c:c1:f7:
4f:24:08:96:20:18:21:71:3e:fc:35:f9:26:c4:82:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:74:5D:2A:8F:AF:8A:D5:4F:94:AA:0B:8B:97:F9:BA:5D:13:91
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f9:4a:b5:9c:1f:ef:5b:e9:a0:ea:15:15:42:38:97:3d:09:
41:e2:7c:88:07:d4:5a:ed:90:3a:89:df:7b:80:aa:16:35:ef:
32:3a:10:55:1a:29:b9:2a:74:1b:f4:0c:00:ba:71:6c:e5:6f:
42:8d:b2:62:2c:48:d8:ec:60:f1:59:ac:be:62:25:f7:78:6b:
c1:7d:5e:01:81:13:67:b7:02:b6:a1:97:d4:2e:93:f5:c3:4f:
ea:ed:c5:5a:ca:86:b1:14:99:fc:47:98:81:0d:cb:59:c2:1d:
83:2f:46:a1:6b:54:21:e1:1c:d7:3e:60:cb:1b:4e:a1:f5:dd:
5a:bf:94:26:f5:a1:bb:25:76:79:a7:eb:0b:4a:ce:4f:e0:97:
f8:4f:ac:83:cb:5c:28:82:e6:64:57:07:10:4b:59:6e:ab:b7:
8f:de:4f:19:0a:eb:95:ea:52:89:47:f2:16:02:d4:77:b6:b0:
8a:21:9c:56:86:61:22:59:9e:42:20:28:74:d7:c4:3a:25:2a:
25:20:9f:64:6b:9f:40:9e:9e:49:7f:49:51:16:5b:26:c2:f0:
d2:fd:de:b6:59:24:b1:09:2a:d4:53:53:08:24:04:82:02:83:
09:0d:41:c5:cc:44:47:10:4d:41:d5:70:98:18:59:d4:b2:1c:
50:e3:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:11 2025 by rpki-client