Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: qcC8MU5fzDwBvSoK2uWCd9YMoCVhZHgrS0Hyd7MkaiE=
Subject key identifier: FA:7C:E0:03:92:8E:91:6E:1C:C7:B8:FE:9D:6B:21:72:49:46:7C:00
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 0198D4E0E8970F758C3D514C7D796100ED49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 01A8
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: 2mN1CqY511Bt63OygIoZOHSLc+2sFeqx7QZBvrcxzlc=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e8:97:0f:75:8c:3d:51:4c:7d:79:61:00:ed:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=fa7ce003928e916e1cc7b8fe9d6b217249467c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:de:63:e9:2f:62:5a:73:cf:60:12:88:bb:
34:8a:eb:d9:cc:39:43:08:f5:30:3f:e5:fd:9a:36:
e4:1a:ed:da:07:1f:f0:96:1a:78:34:0a:3c:30:b4:
3f:08:cb:01:44:d9:e3:8b:d3:f8:45:c5:0f:f9:7d:
1a:e2:ae:62:6b:4d:ea:9a:08:8b:45:4e:5a:d5:7a:
e4:9d:88:8a:20:30:77:f2:fb:1f:03:2a:b7:50:35:
9d:22:36:31:c6:14:0a:64:cc:27:0a:6e:ed:2c:00:
e9:ca:7c:8e:2d:85:0a:2e:0e:b3:67:0c:8c:f2:37:
98:6e:09:34:38:c8:80:0c:79:dd:b5:ff:7d:21:56:
78:e3:f7:c6:5d:77:9b:cf:00:64:6c:e3:5a:39:ac:
1c:a5:1f:2e:c7:5b:37:cc:21:c4:99:e8:85:77:77:
2d:00:48:fa:0a:64:e1:16:5b:f7:b7:4a:60:ee:06:
67:2a:e4:12:94:01:63:aa:7c:73:28:f8:3f:32:8b:
0c:98:6a:90:85:ef:07:4a:6f:6e:1e:5d:db:a8:eb:
27:bf:52:64:a3:6d:ce:04:09:23:1e:46:d1:62:05:
09:16:f1:0c:f0:a6:74:3f:6a:96:b2:9e:6c:17:20:
f5:aa:39:40:58:c5:ef:d8:5f:95:3d:b5:c6:9a:49:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:E0:03:92:8E:91:6E:1C:C7:B8:FE:9D:6B:21:72:49:46:7C:00
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:ae:44:0a:42:5e:b9:af:15:cf:9e:5f:9c:c0:05:a9:d1:
ef:5d:52:c2:32:6f:0f:4b:dc:32:0e:12:d8:8d:5c:28:8f:71:
37:2a:4e:da:a6:3b:b9:13:c3:20:a2:d8:be:d5:4b:8f:5b:12:
76:04:10:69:0d:7d:5d:ed:06:0f:5f:8a:b3:3a:a6:90:b7:6c:
0c:50:f5:d5:0a:29:39:11:7a:20:65:1a:5e:5c:c3:5b:6a:cd:
8d:cb:9f:8d:40:27:ff:d7:14:e0:13:9c:8f:d3:b6:df:eb:aa:
76:4a:7b:f5:67:6f:2b:1f:fc:07:01:e3:e9:e2:d4:1d:24:e3:
a2:8d:fd:5f:f6:8a:4f:d0:89:fd:cc:05:b3:27:19:ce:23:24:
31:08:24:a4:7c:b4:95:74:d2:a2:d2:69:3b:e8:29:eb:2f:1d:
04:f0:ce:04:32:29:0c:2b:e1:5c:1f:22:11:aa:4c:6e:b2:ee:
9f:de:f8:93:23:96:31:9f:19:81:25:76:a4:10:33:88:6f:b8:
fd:7f:09:47:c1:92:e4:2a:bd:07:8f:2c:dd:a1:99:ac:36:71:
5e:cb:e1:7d:d9:57:3e:7f:76:a8:f9:41:bf:40:62:ae:a7:2e:
cb:5d:48:06:93:7c:f8:c8:28:7d:f2:64:c5:0b:98:af:94:87:
c1:ff:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:57 2025 by rpki-client