Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: 5EO+++We3SD461wlh9cZ42Lv9iKsDYq7o1NbO+/HVzk=
Subject key identifier: 9D:C5:71:0A:F3:66:F1:08:37:86:CD:09:E3:54:51:59:BD:FF:72:C1
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 0198D960738C803014C353FDF1DE95D49754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0F24
Signing time: Sun 24 Aug 2025 00:00:33 +0000
Manifest this update: Sun 24 Aug 2025 00:00:33 +0000
Manifest next update: Mon 25 Aug 2025 00:00:33 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: exolUQY2yIiJOakfUdCVtG7fZGA1SlBuBtsdPVD0j5s=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:73:8c:80:30:14:c3:53:fd:f1:de:95:d4:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Aug 24 00:00:33 2025 GMT
Not After : Aug 25 00:00:33 2025 GMT
Subject: CN=9dc5710af366f1083786cd09e3545159bdff72c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:8d:07:5a:5d:ed:c4:c4:e7:93:31:d0:c4:
4b:06:b3:d8:a3:86:ab:5e:10:74:15:27:35:84:72:
47:be:26:f8:77:aa:09:c3:43:ee:a0:c2:5c:aa:19:
ff:b8:0d:e8:aa:e0:b8:23:44:59:e8:21:3b:e4:d2:
0f:26:f2:f6:c6:73:f5:87:15:b6:04:b9:4c:da:51:
1c:0d:d7:6c:b2:dd:72:4d:74:7a:14:e9:8b:5e:7e:
c1:09:39:dc:e9:c1:d2:50:ab:ad:90:f2:0e:59:eb:
47:4a:bd:bc:cd:08:6c:53:16:62:08:1f:7e:7f:90:
c6:db:62:3d:26:c6:34:57:7b:09:fa:b6:b8:e0:fa:
68:8e:68:7d:a9:38:4d:f7:0a:d9:45:ec:3f:c5:0f:
9d:dc:69:bf:3e:ca:ee:61:fa:65:3c:90:aa:19:0f:
b5:6e:27:61:8d:30:6a:cb:73:f4:5a:0d:fc:15:89:
f6:e3:d4:ff:58:22:e4:16:73:8e:e5:25:d1:95:94:
18:b5:49:a5:fd:ad:fb:3c:bf:a1:c3:00:55:f2:f0:
3f:60:61:48:47:9e:d2:42:d5:44:82:d1:6c:ac:90:
80:f5:29:7a:91:4f:15:c9:4d:58:43:c8:85:74:a1:
d3:49:a4:11:5c:0e:0b:87:a1:10:fc:b7:fb:f8:58:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:71:0A:F3:66:F1:08:37:86:CD:09:E3:54:51:59:BD:FF:72:C1
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:5b:64:4a:72:f5:37:c1:ac:90:99:6a:a9:0b:ea:79:c8:
db:2a:6e:9e:e1:cd:c7:0b:ab:d5:96:ec:f1:2a:70:59:01:19:
f3:cd:4d:28:04:e7:8f:7c:09:18:02:0a:bc:74:91:b3:20:13:
2f:ed:43:7d:21:c9:b5:b2:72:63:be:0d:93:47:60:84:15:04:
4a:66:43:6d:af:86:b1:92:a6:8f:98:65:f7:b0:86:24:cc:21:
75:79:f9:44:13:69:bd:41:05:00:70:23:70:0c:70:c9:35:8d:
9a:be:c6:14:20:f3:73:f4:41:d3:83:ba:2f:f3:6c:2b:7a:38:
72:5e:6f:4b:26:d9:46:76:9a:3e:9d:88:a7:c3:42:8a:2c:bb:
b4:48:c8:f5:51:6f:5b:1a:2a:da:fd:c9:b5:52:f4:f6:ce:72:
67:1e:1b:25:a3:66:45:4f:fa:a4:6e:bc:ab:45:4a:13:0d:62:
5b:3d:f5:83:ab:7a:74:41:b3:e8:60:be:7e:64:cb:76:06:53:
71:fa:4b:35:84:5e:3e:62:77:45:33:95:55:57:b4:52:27:45:
d4:d7:83:46:eb:8b:6a:d3:54:ad:11:68:3a:be:d4:aa:0b:cd:
66:09:26:dc:41:49:f0:fa:7d:15:9c:4b:c5:36:b2:2f:d8:fb:
a5:90:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:23:16 2025 by rpki-client