Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: TqzGJEssV4jx3lbdg+PsdSq+jR5sz7AUaxskPlLtiUI=
Subject key identifier: C3:4E:04:74:2A:3F:B6:67:92:A8:58:03:A2:5C:3D:45:FB:B5:37:C9
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 0198D4729C10BB3752502520F271E17EA108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1089
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: 5ZJYmQU3JMRxynysMj3cFBpq2HgSnoVqxZHysGO+gWk=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9c:10:bb:37:52:50:25:20:f2:71:e1:7e:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=c34e04742a3fb66792a85803a25c3d45fbb537c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:3f:89:fd:bf:8b:a3:9f:50:e2:78:56:c9:
83:e5:3f:3c:80:6b:b7:53:bf:3f:ab:88:7d:3a:38:
51:80:ba:88:be:bb:a1:77:10:76:f1:6f:2b:d6:c2:
de:d2:36:25:83:2e:cc:d0:eb:48:79:46:e9:4c:35:
5c:78:d9:03:8e:9c:1c:33:0c:32:9d:75:5d:9b:f5:
87:a5:96:99:3f:1f:08:c2:39:8b:cf:0c:62:4c:d6:
a9:e5:e7:8b:1a:6e:2b:84:1e:25:3e:fb:75:21:6d:
ad:00:0d:5f:aa:3a:53:20:48:69:19:96:06:12:78:
bc:a2:ff:39:15:51:fa:58:3c:e0:b4:d5:09:00:4f:
bc:7f:6a:dd:0d:77:bf:a0:80:db:8a:c6:3c:cc:3b:
ed:d2:2f:47:fd:6e:8e:de:04:39:a3:1a:4c:d6:65:
cb:ca:d2:f9:58:d2:ff:13:11:7c:07:b0:21:54:45:
6e:f8:19:bf:03:41:ef:46:8b:c2:13:3e:79:37:9c:
7a:0e:6e:2c:7a:7d:07:32:dc:35:93:98:5c:e4:a3:
e6:b7:e8:cb:12:e8:b0:6d:67:98:84:a5:58:cf:b6:
da:77:e1:a2:ec:ea:01:c4:85:11:d5:56:13:5b:42:
81:8d:5d:d5:ab:b5:06:11:cb:d8:ce:99:e5:9c:90:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:04:74:2A:3F:B6:67:92:A8:58:03:A2:5C:3D:45:FB:B5:37:C9
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:b9:7d:40:b0:13:99:92:50:20:f6:a6:59:46:de:63:b9:
0c:43:45:ed:c6:b0:76:68:f0:4f:9b:e6:d6:1d:84:5e:35:8c:
06:57:7f:97:97:e5:7f:39:5f:a0:bb:62:dc:9b:4d:b9:5a:bc:
22:ff:0c:9d:cf:94:5e:5b:59:ad:4f:a9:40:bb:47:18:f2:5d:
c1:c6:c4:39:8a:3f:63:34:65:26:35:e1:e3:73:75:b1:b2:59:
87:0b:2c:3e:68:f1:f9:b6:08:c1:2a:ec:3a:32:55:f3:31:1e:
7d:9d:11:f0:07:7f:49:18:40:a4:40:28:4a:f8:f8:ec:16:3e:
dc:ea:4b:42:7e:0a:c9:04:14:9b:6c:62:a1:68:1a:9c:87:75:
66:c9:2c:e5:8b:ab:52:ae:b7:36:6c:f7:62:15:17:cf:7b:c9:
bb:80:0a:8e:f7:d1:ad:7a:3d:0f:ec:04:0c:dc:1f:93:e3:73:
57:3e:0c:aa:8e:c5:97:8b:29:51:61:45:46:5d:a4:16:23:d5:
1b:c9:d3:74:c2:1e:c4:b0:55:dc:fb:43:04:57:15:14:72:34:
7d:99:b3:b5:2f:a6:56:8c:cb:79:3a:60:0f:4a:48:9c:5e:de:
da:c8:85:d9:5e:18:4a:f4:4a:10:d6:79:d3:7c:fb:85:f6:86:
49:90:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:43 2025 by rpki-client