Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: WmLHcML5hzd1Nli6pBjAVxGCLl7EtAHcHu6gL9fPBx8=
Subject key identifier: 85:36:33:31:39:5B:CF:7C:C8:89:0F:A5:69:27:C4:D4:B1:43:74:85
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0198D4E0AF085E5BE2838176386619093279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: n6KS43Za3HTEWtn/AcS5mhWiJ2Q8QkkWeehZb45S1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:af:08:5e:5b:e2:83:81:76:38:66:19:09:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=85363331395bcf7cc8890fa56927c4d4b1437485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:8a:32:23:b6:bc:5f:15:a7:d7:c8:14:7d:
65:e4:3c:90:44:f3:71:7a:d5:c1:8f:00:ce:af:cf:
d4:43:07:95:a5:66:47:27:6b:01:25:f2:69:24:07:
26:3f:98:86:df:2b:16:7d:95:5c:6a:b4:b6:ee:0a:
97:ff:c6:87:30:5c:c3:43:19:04:01:6f:89:7c:ba:
f7:85:91:ae:0e:8a:a0:53:70:4a:03:35:b0:88:16:
03:3e:a8:27:46:21:d1:e0:0d:5e:b1:dd:63:d2:f3:
7a:d7:b1:de:a3:9e:f0:5c:c7:ba:6c:13:ad:f4:b4:
84:35:27:a9:1d:79:59:64:d7:39:ff:90:d2:25:07:
e6:d8:3b:d6:76:e3:91:f5:64:3c:50:cc:04:e1:f9:
28:87:a1:fa:1e:f7:74:e0:9f:2b:6b:fb:aa:a2:37:
6b:c4:f2:7c:c1:c4:87:82:ae:ed:95:70:96:89:84:
0e:f5:54:23:68:89:00:35:d7:b7:d0:41:03:d7:1c:
08:5b:cc:86:1b:69:d3:57:48:53:9e:a5:86:e1:8e:
00:41:40:9b:01:d1:4e:5a:20:b4:8c:b0:c3:db:83:
21:1b:b3:b5:1b:09:5e:cc:7f:5d:3b:68:cd:3a:34:
cd:28:b4:d8:17:bb:5d:1e:2a:6d:de:f5:b0:49:d5:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:33:31:39:5B:CF:7C:C8:89:0F:A5:69:27:C4:D4:B1:43:74:85
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:af:79:eb:26:20:71:77:38:9f:76:34:2b:5e:f6:53:a0:
70:8e:7f:0f:0e:81:ce:da:b4:b6:92:b8:8f:b6:e3:fc:79:1c:
5f:2d:d0:d2:ea:2b:40:5a:60:c6:59:3e:44:3c:2f:16:89:40:
e2:2c:ac:c1:63:fb:9b:ff:8f:51:fb:d2:89:ea:c7:96:b3:09:
a5:07:fb:4d:4c:2d:92:d3:e0:62:05:97:ac:a0:c0:9f:4b:70:
7e:c4:0c:11:65:3d:60:a8:3e:a0:a0:db:62:4e:28:49:51:92:
d9:54:60:10:3c:4e:61:9b:ec:ac:20:50:a5:b5:98:35:b1:67:
96:00:29:b7:84:98:d3:54:ac:2b:9f:d1:06:3c:9d:2b:49:4d:
32:78:0b:eb:71:4a:de:20:08:d3:39:f5:b3:4a:36:d7:0e:73:
48:37:da:78:b4:a5:d5:6c:cd:a1:5f:c9:03:52:17:48:b9:ff:
75:77:f2:fa:3d:76:36:8c:54:46:7d:e4:47:7b:22:a2:ed:3e:
a6:c3:32:09:cf:3b:d5:d0:7a:5d:84:4e:d4:55:02:18:78:dc:
79:ee:0b:a6:75:23:13:ec:60:43:9d:c2:ca:b0:00:9f:2d:6a:
d5:3b:34:99:5b:68:a2:0f:96:87:61:41:56:97:4b:ff:f0:8c:
a3:18:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:13 2025 by rpki-client