Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: 45X0ikahsTIWulYGdiph3kJRkR8KAPD5W8kxAtetIr4=
Subject key identifier: 96:42:CD:B5:11:AF:0C:DE:98:BA:40:F2:98:39:B0:20:8E:51:6B:AF
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 0198D7738B4A11A4A21F0EBE6E66DB9A0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0603
Signing time: Sat 23 Aug 2025 15:02:10 +0000
Manifest this update: Sat 23 Aug 2025 15:02:10 +0000
Manifest next update: Sun 24 Aug 2025 15:02:10 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: 2f2BUxo59CUnxqzgkYl+cFPB0iiNK/UmbaS0t7XVFqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8b:4a:11:a4:a2:1f:0e:be:6e:66:db:9a:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Aug 23 15:02:10 2025 GMT
Not After : Aug 24 15:02:10 2025 GMT
Subject: CN=9642cdb511af0cde98ba40f29839b0208e516baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:8b:e8:de:fd:0d:d3:7a:4d:7b:da:9a:69:
e7:05:98:3b:b6:aa:d2:c9:db:3c:d4:5f:f4:45:61:
b4:81:8a:ee:b1:8e:a0:c3:b2:44:04:b3:35:00:12:
8f:54:cd:18:69:8b:24:a6:b7:3f:c1:87:47:8e:fd:
e9:35:d3:8a:ac:5c:a9:42:bf:08:07:83:24:be:ca:
b4:18:86:ae:15:9a:b1:fd:0a:30:8f:eb:a2:84:90:
25:6e:0a:6c:7e:46:cc:2c:6c:2f:eb:da:2b:25:9f:
7b:ee:74:aa:98:cc:2e:e4:6e:d7:0c:c0:b1:c6:c5:
fe:1e:b1:fd:ac:95:38:6c:f2:11:9c:13:60:04:28:
d5:5e:be:71:bd:f9:6a:f9:7e:57:c1:6d:68:13:7c:
20:b5:4f:8b:03:04:60:5c:bc:d5:9d:04:fb:45:14:
6d:ed:88:56:57:52:08:15:ed:c4:f0:d3:f9:85:9c:
15:31:ce:73:72:24:8e:e9:7f:6e:4b:bd:fe:fb:0f:
92:c2:3a:c0:9e:23:86:5b:26:4a:da:98:17:68:41:
80:0c:06:36:c7:25:87:87:d4:90:d4:2c:ff:29:d4:
cc:99:14:e0:15:a2:51:fd:50:cb:bf:c2:46:e8:81:
d9:ff:ee:de:e2:09:48:cb:dc:2b:ed:4f:92:af:6a:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:CD:B5:11:AF:0C:DE:98:BA:40:F2:98:39:B0:20:8E:51:6B:AF
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dc:68:ad:fd:50:16:0b:b1:53:70:1e:9a:6d:17:98:5d:e2:
92:d1:57:92:12:d8:8c:76:26:28:37:1d:52:9a:c9:0e:dc:98:
a1:30:26:5c:9d:83:9b:a9:56:6e:6d:c2:12:6d:a0:ff:6d:6b:
db:6f:1a:b1:6f:76:08:84:65:ba:14:c2:0f:66:f7:cf:9c:87:
bd:5d:26:8b:55:93:81:64:2f:41:42:1b:0d:ac:76:81:31:cc:
fa:2c:f8:14:7c:b3:91:e5:6f:d2:0d:53:94:ee:87:71:9b:79:
c4:50:ca:fd:62:ef:b4:1b:6e:e3:9c:2e:8e:f7:29:d6:a2:61:
44:37:c5:c1:5d:2f:de:a3:90:24:cd:97:8e:63:33:4b:ea:19:
35:76:03:4c:1c:fa:bb:dd:9d:78:63:dc:94:23:68:92:d6:3a:
5f:a5:b3:5d:c9:e7:2e:f1:0e:fb:27:40:96:80:a9:b9:7c:80:
14:27:4a:b4:a9:3f:42:21:7a:91:15:14:ae:15:b0:81:e3:89:
2f:79:cc:c3:7e:e3:90:21:e8:5d:25:1d:28:43:56:7f:5b:d6:
28:fe:f4:cb:e1:07:9c:d2:12:35:6e:a7:25:f0:79:a5:16:8f:
64:45:d1:11:25:d3:6c:bc:04:9b:0e:80:8e:e3:48:44:4d:3e:
d4:20:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:32 2025 by rpki-client