
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: WbpwRjr1u8VvAD1DuLMgXQDQz9RFJ6aOtKHhCUx2pYc=
Subject key identifier: E6:92:E4:D4:3F:AD:5B:CD:09:FE:FA:E9:EB:8A:2F:C0:07:1E:B1:68
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 0198D473D58EA15420FBDBA3ABCDC097B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 5C
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: 4R35AHwqA96IM+sz60yn7ta2egPcOHHZ8F2O/5k1jN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d5:8e:a1:54:20:fb:db:a3:ab:cd:c0:97:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=e692e4d43fad5bcd09fefae9eb8a2fc0071eb168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:a4:9a:02:e7:c5:3b:88:8c:eb:34:9e:3b:
27:f0:a8:a7:9c:ee:9e:b3:68:23:9d:c0:8f:5f:21:
17:70:f2:86:0b:18:db:c4:b9:ad:40:db:07:0c:4b:
97:95:9d:ce:8c:4c:eb:c5:3d:42:72:a4:d9:e4:2a:
72:84:ee:0c:9d:ca:0d:76:c1:87:9c:79:c8:6a:a6:
f4:26:bb:b9:f7:93:0c:ae:a9:7e:98:30:a3:aa:5c:
8c:70:92:86:62:dc:88:5c:5e:82:08:4b:fd:64:87:
1e:57:5d:bf:9e:9e:2e:e7:de:f9:ba:12:10:66:79:
b2:8d:2a:d4:b1:95:2a:ce:7a:68:42:7b:13:44:e5:
7d:22:a0:b1:b4:7f:45:83:8b:a9:8b:8f:6d:72:55:
2b:1b:fc:84:3e:0e:78:e3:c7:a9:36:d7:bf:ee:db:
65:e4:61:05:ff:7c:ce:d0:c3:61:44:5d:b2:87:a0:
b7:68:81:e4:4e:a4:8b:5c:06:8b:26:f4:08:0b:ec:
cf:6c:41:bb:e8:74:7b:91:5e:87:cd:2d:7c:41:a9:
02:28:1d:9d:3f:67:a4:c4:15:83:ca:c4:ee:80:ff:
cc:c1:d8:d8:d9:ff:d5:9f:1a:2b:ba:74:82:32:f9:
21:e2:eb:30:9b:63:74:4c:32:d3:27:3a:e9:6f:35:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:E4:D4:3F:AD:5B:CD:09:FE:FA:E9:EB:8A:2F:C0:07:1E:B1:68
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:73:df:37:58:ef:49:82:09:9b:4d:bb:85:fe:b3:3b:03:
49:28:15:02:69:05:fe:b4:ae:20:fb:64:91:f9:48:7e:b4:a9:
35:72:24:7f:83:47:24:ab:bc:a7:f4:11:49:59:3d:c2:70:4c:
e7:8d:18:ab:11:61:3a:60:9d:e0:d6:e2:f0:d4:aa:f9:1c:83:
16:0a:e2:52:9d:b6:8c:7f:e2:bf:97:1f:87:bb:0f:ee:c6:ec:
cb:05:37:83:66:7b:cf:c9:d9:24:b9:0f:a7:af:26:3f:25:02:
1e:0b:e4:09:ea:c4:df:77:78:f6:48:3f:39:1a:c8:14:bc:73:
df:f2:98:0c:94:14:7c:67:de:24:69:8b:29:c5:64:3f:0e:af:
8e:27:24:02:7d:7b:b7:42:dd:6b:9e:5d:87:2a:be:95:06:b0:
09:a9:f0:ee:bf:f8:50:d3:7c:91:99:4d:56:ba:35:66:d7:93:
7c:c7:07:40:35:06:6a:c5:c7:58:56:b4:fe:eb:9a:cc:38:db:
0c:54:4a:59:7b:53:e5:bd:4c:7c:49:3e:ba:5c:55:fa:85:24:
0e:b0:a0:58:22:d1:71:6a:76:3b:a5:70:2b:fd:3a:e0:3e:43:
a9:2d:db:67:9c:ce:67:4b:9c:6b:db:8c:15:bd:03:3f:e8:e5:
4c:e7:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:40 2025 by rpki-client