Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: EI5cVrnrFOc6MHfiXJhq5S8EgzwtE2654t2604rWEeM=
Subject key identifier: 2A:E1:D3:80:A9:4C:05:BF:80:D4:65:5A:09:FE:F4:BD:84:24:73:8E
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0198D583F9E64053F48D194316DE2078A0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0AB1
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: 6PZGbsAPOJh7ufb+Em1ejfCoXNcVgdj/vJbEMSRjSO4=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f9:e6:40:53:f4:8d:19:43:16:de:20:78:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=2ae1d380a94c05bf80d4655a09fef4bd8424738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:a2:33:14:8a:d9:c0:3d:0e:3a:78:f9:a3:
22:53:ef:69:22:65:a6:9c:60:cd:62:92:57:55:b3:
10:f9:05:d1:40:97:9b:61:13:b6:1d:c6:17:66:25:
ce:4e:1a:2a:f5:3b:cb:b8:89:ca:e5:8d:f3:44:aa:
b4:10:23:e1:d9:5e:21:38:a1:3a:13:5b:94:09:91:
0a:96:69:ef:eb:37:07:3f:9e:aa:37:ee:1c:11:87:
b7:ce:f9:c7:c2:dc:82:28:5b:8f:b1:3b:29:c1:dc:
db:6b:c5:b1:74:93:a2:84:45:72:1e:48:65:86:32:
78:7d:e3:5f:7b:18:c1:10:63:35:95:46:5e:a0:8e:
95:fb:43:95:89:61:6e:88:c4:a6:ca:d3:c9:06:7d:
cb:b4:50:c5:40:34:3f:b8:dc:05:8f:3e:df:b5:f7:
fe:0f:24:fc:85:01:4d:98:b1:c4:96:7e:5b:3d:10:
b0:41:d8:e2:3a:5c:26:36:95:63:01:c6:aa:26:0a:
d8:bd:10:1e:12:b9:9b:4b:19:47:d0:80:c5:ae:6f:
74:11:2b:2c:f1:81:01:72:fb:c6:9b:33:f1:97:7c:
22:a5:98:98:90:e6:dc:92:d0:8d:7d:9b:81:d8:d3:
55:d8:63:53:64:b3:5a:cd:96:eb:e9:28:01:80:dd:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:D3:80:A9:4C:05:BF:80:D4:65:5A:09:FE:F4:BD:84:24:73:8E
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:00:80:85:13:79:ea:d3:07:cb:a0:ef:c1:ce:b7:a3:6d:
85:36:31:fc:67:73:60:21:39:3c:08:d1:8b:54:d3:68:7b:e1:
70:c4:00:ab:0f:b1:17:8c:6c:b7:98:80:32:0f:b5:00:61:af:
1d:17:97:c4:1c:c1:10:60:03:d0:5d:a2:c4:c7:54:7c:41:93:
11:2d:03:42:47:50:8e:b8:05:0d:71:e6:e3:4d:61:37:c1:43:
00:04:b8:4b:c1:36:36:56:48:51:30:8e:3b:6b:b7:6d:b3:f2:
74:3c:aa:e5:91:ab:b2:93:84:8c:fb:48:bd:03:cc:f8:43:20:
32:38:be:1b:49:8d:4f:82:ec:4c:80:12:64:e6:fa:a2:88:a8:
df:12:33:6d:36:a0:f7:56:59:a8:00:df:9c:76:ae:bf:6b:87:
5c:4d:0b:59:4d:30:ef:a9:d2:ca:28:a2:ae:3f:59:44:f3:fc:
db:14:d2:99:3c:03:cb:4b:57:f2:c8:3d:b5:ad:52:9d:fe:a1:
c3:ba:d7:57:f0:9d:41:39:b3:e4:0d:c5:23:ee:ab:16:8f:f6:
68:8e:6d:bc:ea:f3:6b:84:6d:60:dd:f8:b8:ec:14:06:6a:b2:
95:7e:b7:cd:5d:38:7a:86:97:bb:9e:e2:fa:1c:9b:f1:3e:76:
d8:07:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client