Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: QEuzQHeTM6mq5RRwvztb756b/+m7ZlnKb+e7tlrpV+0=
Subject key identifier: B0:CC:BA:D3:15:E7:AF:CB:22:66:22:81:8F:F2:72:53:79:E9:DF:32
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0198D6CD3F5A416B9C4BBC179851652AAE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: XmPRpAll0e70bL311TpYh28T0MeZk8rVFpKzIl5gIHY=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3f:5a:41:6b:9c:4b:bc:17:98:51:65:2a:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=b0ccbad315e7afcb226622818ff2725379e9df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:cc:af:70:5c:5b:17:da:c0:ef:44:5c:0a:
ff:2d:20:0b:55:24:35:c1:3b:70:10:4c:1f:e9:f0:
06:98:eb:60:2c:aa:4e:84:74:b7:f0:dc:13:21:ab:
2e:74:2d:69:fc:b3:1f:7f:78:f5:d1:fd:b4:e7:2b:
7f:64:81:be:a5:34:e5:31:ad:80:18:88:8d:f5:5f:
0b:57:14:22:f4:8e:1d:04:45:5f:6e:bf:a7:4d:7c:
72:6d:ad:7c:a5:3d:d7:c4:62:96:d1:e4:9f:09:95:
4f:fb:04:a3:d3:51:da:28:53:46:9c:22:eb:fa:23:
ea:32:e4:db:b9:a8:a3:96:00:bc:37:e6:92:e0:31:
f7:88:fc:b8:06:e5:56:59:4d:0b:7e:fe:7e:98:b9:
f9:49:57:98:bd:66:18:51:3a:03:a5:3f:e9:1b:53:
24:8d:e8:3c:b5:80:bf:fd:32:9a:00:37:64:d5:7e:
66:c3:9b:7d:c8:a7:7f:15:a4:7a:05:d5:7b:32:09:
75:70:9a:75:3d:4b:bf:d9:4c:01:d0:9f:66:6e:83:
43:f0:a8:de:bb:86:83:7c:f5:ed:92:83:5e:57:18:
b5:4b:4b:a6:cb:16:c0:74:2e:4e:e8:cd:fe:4b:51:
ad:69:16:86:22:f4:72:e6:4f:21:9e:b3:51:82:34:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CC:BA:D3:15:E7:AF:CB:22:66:22:81:8F:F2:72:53:79:E9:DF:32
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:1f:ef:e1:ae:60:e9:19:e5:06:4b:6e:e8:f1:6e:0f:47:
f8:3a:cb:4c:1a:45:f2:86:2b:f1:b7:28:e4:8b:9e:fc:f7:1e:
7a:3d:a5:a3:84:31:f7:7b:52:1e:99:45:22:f7:ae:9d:62:19:
a2:16:7a:3f:7e:40:41:66:81:77:9e:5c:d6:51:35:0b:cf:c0:
88:76:05:1c:d7:88:46:bb:e9:51:02:ae:30:73:31:5c:53:5b:
4c:1c:ea:a6:4a:d0:16:2e:9c:09:cf:ce:99:35:55:db:43:10:
22:1b:d3:bf:e7:ce:1e:ce:3b:25:9d:1f:e8:5e:a2:b0:9e:6f:
31:1d:6f:96:6d:f7:4e:cf:22:bb:0e:4e:03:94:34:87:4d:79:
e8:f7:95:22:ce:76:00:06:8f:28:4b:e8:5b:5f:91:b3:f5:3a:
b2:b5:79:82:4e:8d:4e:c3:dd:63:cd:fd:36:6d:c1:16:7f:c8:
7a:5c:33:cb:08:16:57:d2:45:9c:ac:54:8d:e4:ce:85:36:59:
a2:12:9d:93:4c:1b:df:d4:95:cd:24:ec:a5:d8:4c:3f:0a:1c:
d2:3b:9f:a8:c7:f4:a9:f1:43:03:71:3d:c5:75:f9:15:42:21:
9a:30:c6:86:be:0b:7c:26:b5:65:b1:6f:9e:45:e0:bd:de:d5:
3c:9e:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:50 2025 by rpki-client