Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: jsoBL0Dw6xwFdmrLt2JuDleWEDCQbp0DCIBMnRNMc6s=
Subject key identifier: EC:42:48:17:09:ED:BA:7F:04:47:23:A2:13:76:59:B6:66:AD:A6:E3
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 0198D4A7849842AD9F2052C5C59198E2F9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: h426XyvTRyo1ilAXcI2ZGRIh04WwvjQAaZGonRw+PtE=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:84:98:42:ad:9f:20:52:c5:c5:91:98:e2:f9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=ec42481709edba7f044723a2137659b666ada6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:b5:cb:51:e4:99:de:5b:31:8b:78:d6:d3:
3b:99:c7:1c:71:22:4c:82:26:07:a7:9e:f5:88:7b:
af:37:1a:ef:6e:58:7b:35:8b:8d:d5:82:de:1a:2b:
85:da:29:e7:b2:35:e8:68:5d:2d:32:c3:a7:0d:89:
14:38:e4:c0:1f:e9:71:0a:13:cc:73:1d:d6:26:a6:
5f:8e:08:46:83:25:38:3a:2e:01:ae:3c:5e:59:90:
41:a9:73:24:b2:ea:13:82:87:f1:4f:8b:11:6e:35:
4d:13:13:ee:29:2c:e7:75:11:f5:27:22:42:6e:d5:
eb:28:77:a8:1a:01:b3:6b:db:43:6b:7e:35:cb:18:
d3:fa:a6:c1:d9:d4:4c:ef:80:79:d8:c6:81:64:d7:
9e:01:7e:5a:16:05:b7:bf:3b:f5:83:7e:2e:1d:7b:
36:45:b5:90:38:6e:49:be:ca:2f:92:40:ec:b3:12:
5d:3c:ac:d2:37:27:42:f8:c4:0d:f4:3e:c3:d6:3e:
a4:1d:47:98:6d:1d:fb:57:cb:29:72:44:cf:ba:75:
c0:da:b3:c5:18:c8:42:4f:71:8e:7d:91:f6:a4:54:
06:51:37:21:9f:73:77:b1:58:3f:52:95:d1:27:e5:
37:a3:eb:f9:c9:4a:3d:f6:36:b4:d1:22:c0:25:40:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:48:17:09:ED:BA:7F:04:47:23:A2:13:76:59:B6:66:AD:A6:E3
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:f5:2a:7f:19:98:32:c0:68:45:33:03:8c:1c:96:96:35:
55:40:9e:4c:8b:77:42:b6:ee:43:87:5f:4e:fe:30:5c:e5:d0:
a3:5e:c5:dd:06:24:09:33:b4:0b:cf:50:d0:53:62:e4:e8:0d:
09:23:a1:46:42:97:70:79:ab:16:3a:de:1c:d9:09:fd:06:cd:
4d:f0:7e:59:5d:c7:bf:89:3d:24:34:ca:10:9a:10:f7:b0:9d:
7d:a4:76:28:28:66:e5:0a:43:b3:fd:29:fe:67:9b:c9:27:29:
f4:68:d3:f2:da:14:65:4d:e2:a2:3f:d6:32:af:3d:93:e0:0d:
65:65:3a:83:a4:04:79:c8:18:df:5f:7d:f2:7d:33:5e:c5:35:
89:35:2c:7a:00:a8:85:f9:3d:ec:0d:04:e7:f9:93:4a:d7:a1:
25:f1:0d:9c:04:e8:43:3b:da:29:a3:2c:31:85:85:75:18:69:
b5:eb:45:7b:39:d3:33:a2:d7:7b:20:7d:32:1c:be:fa:a5:96:
f4:de:11:9f:b5:64:44:36:b6:4b:97:43:4e:d4:80:81:ff:ea:
b5:88:3c:25:07:05:45:a2:30:c8:f0:4f:54:f7:04:47:07:5a:
18:39:dd:1a:17:58:1b:1f:59:f7:d6:78:70:f2:a3:34:9e:f8:
b7:d3:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:44 2025 by rpki-client