Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: AGgzVItB61Wm5g6owBkXKZKKGunnFMZSY12baBtN4Xs=
Subject key identifier: C6:66:89:6D:E3:2D:56:EE:50:03:4B:EB:92:EF:9D:AE:72:AD:B5:9F
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 0198D65F39648A6EF22EE85C1A851CFBF938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: Kk2PbHUawuHIRCTc5sRrirl/j51VKqHFvXLQqniwJb8=)
2: zwMZXsX6Z6y_GtPEpsaBS7FPtIU.roa (hash: bi378rHsH1o9Uq16RD7qe5x44q14EkwJzXLivtK1Naw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:39:64:8a:6e:f2:2e:e8:5c:1a:85:1c:fb:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=c666896de32d56ee50034beb92ef9dae72adb59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:00:fe:53:0e:6a:6f:83:4a:46:26:71:01:
3e:48:9a:05:29:97:e2:71:eb:3f:ab:b8:1e:41:a2:
c8:8c:79:5c:42:39:af:8c:7b:ed:5e:15:ae:2f:c0:
00:74:92:36:a0:7c:7c:7d:e4:c6:31:b6:03:a3:ef:
5e:e3:c3:e2:01:01:e7:ee:6a:8c:73:08:fb:e0:12:
bf:24:ca:dd:e4:c1:a2:98:3f:85:56:27:fa:ab:09:
34:7f:14:80:5e:06:65:15:44:b2:7a:01:65:0f:42:
4f:e2:40:5c:e6:42:b5:95:25:34:0a:05:52:57:11:
01:dd:71:fd:01:e0:8d:95:68:93:7a:33:4b:21:ad:
c3:54:ac:3a:80:8f:37:73:4c:52:5e:c0:34:14:83:
6e:b8:23:6d:d7:a9:b0:8a:dd:b8:86:30:16:cf:f3:
91:8b:16:08:ca:a9:2f:43:bf:54:f4:9b:81:f9:00:
5f:21:f3:73:59:e6:4c:ca:b6:f9:16:b0:27:39:62:
a3:03:a0:65:ee:b9:2a:6f:1d:d3:11:6d:0d:18:a6:
d7:97:d1:8e:3e:94:c9:5b:2c:ee:14:f2:cc:5f:37:
f3:df:e9:bb:81:4f:db:fc:be:9b:d1:4c:37:32:98:
c9:71:18:89:2f:42:1f:5a:93:0d:54:b6:d7:e1:05:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:89:6D:E3:2D:56:EE:50:03:4B:EB:92:EF:9D:AE:72:AD:B5:9F
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a1:77:2e:a5:a2:2c:7a:13:50:29:cb:67:fa:88:19:f3:10:
40:41:58:90:f4:50:5b:f8:c6:84:27:fa:33:37:ff:71:b1:0c:
f7:33:31:9d:e5:b4:73:9e:92:7a:91:43:65:c2:cd:0b:87:b2:
b6:3c:97:3f:d3:af:3d:57:63:af:73:5a:fc:a4:1f:2a:f9:6c:
80:15:3d:97:13:66:15:b2:2f:7e:fd:4e:03:ba:75:4e:22:be:
47:f5:e5:ac:12:71:e6:92:5e:c5:e1:0f:10:39:38:90:62:7f:
9b:e0:00:a6:93:44:f4:58:0c:6f:91:f0:17:3b:a0:22:0e:ac:
3d:60:fd:03:6b:63:da:e1:74:45:05:a6:33:23:d9:a2:ec:57:
eb:ed:49:a6:d4:50:d8:99:20:c0:4f:d9:a0:c1:30:74:58:ca:
36:cb:1f:03:74:4e:97:e8:4b:0f:cf:1a:0b:98:b3:06:f3:e4:
54:9b:de:ee:d9:95:15:b8:57:0e:c6:5a:94:13:00:19:4a:82:
aa:38:35:54:63:c0:f4:b3:16:9b:71:ca:88:26:f6:89:64:3f:
f6:bd:67:bb:a6:49:70:ee:4f:ed:d5:ba:5c:47:5e:49:c3:1d:
e3:cf:b1:70:26:a1:7a:49:5f:38:b6:67:9e:3d:9e:78:aa:c4:
81:58:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:34 2025 by rpki-client