
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: wAi8pQ45VPIsokgLzLSzHvu3t8cEaavnqSmYJnCZztc=
Subject key identifier: 9B:31:91:27:D2:1A:54:CF:50:C4:13:4F:7F:08:98:A9:D7:C6:F7:93
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 0197C801E1383E20223E88088B678A6F8DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 22:00:55 +0000
Manifest this update: Tue 01 Jul 2025 22:00:55 +0000
Manifest next update: Wed 02 Jul 2025 22:00:55 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: LkIYLpBzLKVLCmgeSsNzVmGUgOE/khZ+dZRM9GVm4h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:01:e1:38:3e:20:22:3e:88:08:8b:67:8a:6f:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jul 1 22:00:55 2025 GMT
Not After : Jul 2 22:00:55 2025 GMT
Subject: CN=9b319127d21a54cf50c4134f7f0898a9d7c6f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:67:8c:63:9f:cb:c1:92:f3:e0:2d:c8:d5:
63:e6:13:d0:0b:c3:7a:77:11:97:7b:d5:5b:d3:dc:
04:29:f7:7d:55:90:ec:32:2a:ad:aa:3e:84:c9:ca:
24:db:d4:ff:26:e6:b3:8a:dc:5b:8f:c4:d1:ec:28:
19:b2:3d:9b:6f:0b:3b:40:a4:73:4b:a2:84:25:f4:
b2:d1:a0:47:a4:14:02:f0:1b:12:08:22:eb:b8:5c:
e1:02:4d:a7:0b:9f:ad:ba:73:60:a8:c8:00:6f:e1:
41:59:dc:3a:9d:b1:bb:c6:0f:93:10:84:53:5e:8a:
b4:bb:f4:47:d9:5c:85:3b:91:5f:5a:34:85:ad:65:
a0:74:ca:5c:1a:9d:6f:7d:73:58:b5:7a:ca:90:8c:
1d:c2:0f:c7:3b:d1:45:ca:71:30:16:f3:26:b7:31:
ba:3e:2f:dd:de:51:1b:64:4d:96:4c:08:92:53:b9:
34:dc:73:79:4d:17:86:2f:3a:73:ab:44:82:53:50:
85:54:48:69:59:61:31:f4:f1:c8:f5:bb:28:45:d0:
2a:4f:cc:4f:5f:0c:39:bd:97:64:69:48:e9:d5:60:
0c:c2:16:3e:39:b4:94:01:8e:b9:19:5b:54:98:f1:
17:24:28:04:22:37:81:16:63:9d:3d:92:e8:b6:88:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:91:27:D2:1A:54:CF:50:C4:13:4F:7F:08:98:A9:D7:C6:F7:93
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:33:3d:d8:b1:0e:99:25:b7:14:10:15:04:a0:1d:3c:04:
31:09:80:dd:6c:96:cb:e8:f9:02:0b:c3:f2:53:2d:7c:88:38:
ab:5c:10:fe:08:51:e5:4c:7f:aa:ec:25:6b:3c:e6:48:8f:cd:
cf:4b:2c:79:2c:76:fa:58:3d:ba:85:7e:44:82:ce:fd:46:58:
16:50:37:34:87:39:5f:a5:b2:5a:0c:ee:11:f6:84:4d:2b:eb:
95:80:f9:9a:37:63:1f:67:1a:ab:f3:79:34:70:62:87:d5:72:
e1:fb:9f:e5:ff:6b:d3:3b:6d:8d:68:55:44:b5:e9:cd:c2:be:
b0:83:8a:85:1d:16:f8:70:6e:c4:aa:75:fc:02:a7:55:f4:63:
96:5e:4d:25:ee:06:2f:1a:9e:1e:89:0f:ae:28:c2:2c:58:e5:
c8:47:b7:79:30:23:5c:b6:cf:2a:22:d5:05:63:42:d5:2e:44:
13:cc:a9:14:7e:e8:be:c5:a4:35:34:7c:dc:fa:64:45:e0:e3:
fd:67:f2:d0:0b:f8:5a:58:6c:b5:f6:9c:73:76:a0:af:6b:21:
7a:74:a0:66:ea:cf:9b:32:94:cc:a4:89:ad:b1:b1:f9:d5:6d:
a9:1f:a7:cc:78:7c:7c:ed:31:b6:a7:77:a7:41:1b:fa:22:bc:
96:08:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:06:48 2025 by rpki-client