Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: tmI5JM57Tou/vqKnXR5OfGd7VcRFyr4BfJac+/pK1Ro=
Subject key identifier: F2:C1:5B:BB:F9:53:5A:91:F5:59:64:71:81:03:24:B6:BA:C3:A6:94
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0198D54E8E7A0B67CFD0E65FD900E1E4A315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: GxZKcl2Z8C9EmjBIJz6tkQJJMsx9wAfr0ccuzSiAYyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8e:7a:0b:67:cf:d0:e6:5f:d9:00:e1:e4:a3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=f2c15bbbf9535a91f5596471810324b6bac3a694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:02:65:4a:66:28:df:b7:95:f6:7b:5f:93:
82:82:df:62:e8:b1:dd:7e:ad:44:e5:d6:91:fa:27:
ba:e7:d7:74:88:c1:4e:91:21:85:23:cd:79:38:0d:
9f:ab:44:98:0c:76:0e:2f:e5:5f:8b:79:04:03:d7:
c0:ed:2f:a4:e6:ac:b1:6d:2c:dc:dd:e6:9c:31:ca:
9d:f3:34:7d:29:96:46:dd:44:44:96:ac:3f:9e:db:
f4:86:05:d0:42:4c:47:58:72:fa:7a:b4:54:78:63:
50:91:96:7f:84:e9:65:bb:6c:ab:65:6c:95:96:e5:
2b:77:bb:65:d7:fc:7f:3f:8f:fc:56:6c:43:22:05:
c6:2f:98:3b:14:56:db:a7:c1:19:94:80:d8:84:a2:
97:1e:a3:8c:d8:1b:a6:bc:a2:61:a7:fc:51:02:f4:
6c:2f:09:ff:c5:e8:4d:8b:a9:35:22:ab:cf:20:46:
b4:42:22:2f:85:85:48:cd:9a:48:d2:97:37:85:5b:
b7:6d:06:03:80:d6:cf:ab:3a:d5:2c:5a:e2:27:f1:
b9:78:e2:6e:ed:0b:21:41:6e:ba:c4:1e:69:b7:31:
9d:8b:8c:7a:5c:56:9b:cd:f7:a0:d6:ae:5f:35:8e:
29:a8:4b:4f:94:84:66:42:68:06:f2:0a:db:64:77:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:5B:BB:F9:53:5A:91:F5:59:64:71:81:03:24:B6:BA:C3:A6:94
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:bb:8d:5d:97:74:fd:c5:3e:c7:48:b3:60:e2:9e:b6:a9:
86:2e:58:53:a8:79:56:7c:eb:46:b5:9b:17:d3:1c:b0:f7:4c:
ce:a7:19:15:6a:99:dd:fa:99:8d:ef:dc:41:e7:fe:92:c7:ff:
9e:14:7b:6d:0e:f3:98:4b:ff:01:72:da:ab:52:3f:1e:8d:79:
93:77:3f:9a:51:d9:c0:22:6c:52:a1:74:92:92:71:83:08:60:
cc:69:ee:0f:25:83:d4:84:c5:4c:ff:7a:cf:37:38:3c:75:f1:
19:e7:aa:b5:5b:e5:f1:3e:ee:84:a8:28:c2:dd:48:61:6d:1b:
6f:7a:a7:64:25:b5:98:95:10:f4:91:c8:ae:63:0c:94:30:9c:
a0:1f:31:48:b5:6a:b8:bb:f8:5b:54:f3:ed:8c:47:30:f8:02:
c7:6b:0f:d0:3f:de:61:ad:3c:95:d7:e0:c7:51:0a:87:e7:e6:
3e:7f:27:58:3d:73:ea:c8:a2:b3:f6:f2:b2:33:d2:11:80:2b:
26:72:1f:a9:e7:37:48:fc:8e:dc:42:47:98:5f:2d:9b:02:f7:
10:c0:f1:ac:42:57:56:85:91:0e:9a:ac:30:f9:be:e1:c6:d4:
cf:ff:88:ca:9c:fd:95:e9:5c:c7:8d:16:8b:28:12:bb:45:30:
12:c8:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:49 2025 by rpki-client