Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: JzQDey7HtOjyB8M7mbmyymEIKdKTCpNZjyQNS2bIrjY=
Subject key identifier: 46:4E:95:E9:65:4A:4D:85:5C:FE:0C:98:98:71:14:F7:B3:A6:ED:72
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 0198D5160CE158A644DBBBDCFAE926209A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 04A8
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: Yi/LguWFyTQavEivMikWezLkqgsfmG9AVzb94MmF3jE=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0c:e1:58:a6:44:db:bb:dc:fa:e9:26:20:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=464e95e9654a4d855cfe0c98987114f7b3a6ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:59:a7:bb:14:26:ec:d1:b2:41:58:94:e7:
f0:19:8b:d8:ca:2e:3d:33:73:36:87:f9:ae:12:5a:
fc:bd:95:55:42:bd:97:a6:48:8a:fe:f1:e6:f4:e5:
b5:72:f6:35:19:8e:91:46:ab:60:e3:74:f7:09:dc:
60:47:08:55:52:ca:c7:6c:b9:8b:a0:01:67:24:1c:
12:92:15:e8:62:e6:79:f9:02:a4:53:27:e5:11:b3:
22:0d:a2:25:69:b8:b2:eb:f9:e8:7e:64:44:80:3e:
49:59:03:de:72:9c:c6:60:8b:f0:a2:a7:b1:44:62:
71:74:16:f3:e6:c1:a4:e5:dc:56:91:a3:7d:ad:fb:
e4:45:a9:35:69:59:a6:83:77:6f:99:e3:5a:95:e3:
ee:e8:ae:5f:67:3f:4f:9c:51:40:55:b3:5e:c2:f4:
53:f6:30:33:16:5b:75:42:d6:6d:78:18:1f:1e:f3:
b8:2f:2a:a7:d7:83:9d:ff:a4:3a:d6:de:fe:fd:f7:
c1:c1:f1:bf:cf:12:ec:91:3e:d1:28:60:8a:7e:d0:
22:f6:f9:c1:bf:4d:ef:a3:64:9a:dd:0f:b8:60:25:
14:cb:71:f6:b0:f1:9a:75:91:c5:c5:bf:44:08:24:
b0:f8:64:b8:7d:60:72:6f:c3:d5:9f:50:ff:d7:c4:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:95:E9:65:4A:4D:85:5C:FE:0C:98:98:71:14:F7:B3:A6:ED:72
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:2d:df:e0:65:b2:2d:4f:ae:ac:7a:95:3b:23:9a:bb:64:
7a:d1:9a:2b:67:78:24:fc:81:c4:b1:20:d6:ba:c6:4a:38:31:
36:52:9d:81:5c:9d:3a:b6:52:0b:5f:01:b8:24:45:8b:3e:7f:
2e:10:80:f7:98:7d:14:a9:e4:e1:24:ae:b5:4e:a4:bc:fd:06:
d8:19:10:95:de:89:b0:c4:4e:5d:6b:55:b9:f3:0d:99:c8:9d:
af:67:64:fd:92:73:95:6f:1f:82:05:a7:b4:1f:72:2c:e4:70:
63:58:98:a0:6c:1b:1c:b4:c8:49:28:5c:d3:43:29:36:51:75:
25:d6:64:fc:6d:c3:e7:0a:ce:90:69:a0:7d:bc:04:da:e5:73:
9f:c6:6b:1a:96:15:2d:bb:c4:30:3f:38:6b:37:69:8a:60:34:
fb:02:b9:a4:40:85:3f:7d:be:12:0f:64:7e:9c:cd:24:b7:22:
6c:41:b5:9c:ae:97:74:00:98:de:85:76:95:69:f7:09:57:3b:
4a:ed:69:c0:4f:5d:d2:8a:be:63:06:5c:43:e6:48:78:04:a2:
3f:6a:a8:ac:a6:d6:e8:34:68:df:bd:6a:fc:30:e8:46:a8:32:
b2:c9:9b:e3:42:80:74:b1:0c:d8:0c:a0:df:0f:ab:2c:af:ff:
93:58:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:49 2025 by rpki-client