Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: mSvf9kOPJ1I/oc62ZN2mWLimby9VvmGhfHe9fdcZmok=
Subject key identifier: 65:A9:EF:E1:55:75:24:A3:05:94:D2:BD:29:6E:39:BC:5D:A0:60:87
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0198D65FC22C082BC70F6F5C7E524CAAE42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: bpUPGugZz/YHgSGEG+lZPmDbCuRdw64gOMCpPL/GLYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c2:2c:08:2b:c7:0f:6f:5c:7e:52:4c:aa:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=65a9efe1557524a30594d2bd296e39bc5da06087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:56:da:c6:3b:72:18:2e:23:63:c8:08:75:
6d:31:bd:74:d4:d4:57:c2:79:bd:02:90:ee:3b:eb:
91:64:1a:1d:cc:8e:1e:45:be:92:08:ee:cb:f3:b3:
b7:1c:31:cc:39:45:f8:f2:b1:be:3c:be:dc:f2:2b:
e2:44:52:fa:3f:4a:d0:69:2d:b5:c0:7b:5b:ab:2a:
13:1f:ad:ec:c0:3f:2f:14:83:37:f9:62:80:2a:87:
db:12:14:d9:c1:e9:3e:1a:af:31:58:13:05:bb:ff:
fa:dd:df:e4:52:70:ab:92:50:b3:ff:37:d7:b8:fd:
50:b4:72:53:1f:a3:da:ff:54:9c:68:b5:58:8a:ac:
15:b4:eb:26:42:67:70:cf:49:53:79:c7:1d:f4:d4:
63:cc:ca:94:67:2c:4b:38:89:5c:fd:d5:55:57:98:
a3:23:2b:7d:36:48:32:ca:e3:df:f4:0c:d6:7e:bc:
81:e4:fa:ad:9a:c3:5e:19:75:7e:53:1e:32:6f:78:
c3:9f:39:e6:6b:ef:12:ce:e6:af:98:61:d1:fd:5e:
a0:b5:5b:30:68:e6:ff:6b:40:d6:35:83:bb:ad:6e:
b7:e3:b3:6a:e5:19:93:35:b1:43:c3:37:48:bf:5e:
28:b2:c8:16:05:2d:92:cc:2d:39:d7:d9:f7:fe:f7:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:EF:E1:55:75:24:A3:05:94:D2:BD:29:6E:39:BC:5D:A0:60:87
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0e:b9:d5:46:2b:22:ce:1a:f1:6a:1b:63:a6:f2:ec:07:98:
25:9e:01:a6:31:83:7c:98:f1:01:79:89:16:f5:54:5e:d6:19:
86:71:e7:f0:03:64:11:88:67:be:06:5a:39:8c:71:ab:c0:62:
d2:c7:e3:21:c3:a3:64:21:a3:b1:76:45:e9:3b:96:f1:ea:ce:
bf:b1:74:b9:f4:1d:95:74:ee:c3:ae:b6:c1:ed:b7:c6:63:57:
4a:91:be:80:b4:33:4f:60:23:a0:91:79:0f:11:2e:87:6a:e9:
87:05:b0:77:3e:70:e4:ac:ca:6d:71:d6:f3:6c:54:fc:e8:e4:
85:64:0c:55:0d:2a:54:0e:ab:7f:6e:bd:47:d4:78:a9:4e:af:
e8:18:e7:65:41:1f:68:21:c2:88:7a:b2:61:f1:c5:62:39:17:
71:32:81:24:34:9b:1b:2a:92:85:f0:a9:7f:3a:44:9c:07:eb:
e8:80:5d:21:5d:51:61:d3:1c:db:d0:c9:84:73:74:8d:20:75:
9d:f5:b9:26:9b:5c:b2:0a:86:4d:45:eb:d8:ad:9e:e1:83:6d:
36:d4:67:30:46:23:08:ad:9e:77:1c:92:58:87:96:b2:94:c6:
42:e6:f0:c3:7a:ab:23:c8:3e:5a:00:56:a6:52:b9:a0:5a:80:
2d:e8:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:49 2025 by rpki-client