Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: Vp/AMoPCbUUriESX6AAm2VrqyRqjjGLWl76fn0tmReo=
Subject key identifier: 94:F9:07:D7:05:37:2D:72:10:21:7A:63:E1:26:27:35:B9:3A:10:27
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 0198D73AF386FC67282363680551CDE7B556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 14:00:21 +0000
Manifest this update: Sat 23 Aug 2025 14:00:21 +0000
Manifest next update: Sun 24 Aug 2025 14:00:21 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: ftrjlmcVax/un4JZ1mwEsZ1E+6qYBjnLrzhGFjUaSoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f3:86:fc:67:28:23:63:68:05:51:cd:e7:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Aug 23 14:00:21 2025 GMT
Not After : Aug 24 14:00:21 2025 GMT
Subject: CN=94f907d705372d7210217a63e1262735b93a1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:4d:01:10:a0:0e:ba:f9:ae:60:9e:99:9a:
e0:62:13:66:1f:2f:61:6e:75:7b:d0:d2:b6:27:ca:
d4:97:a0:48:d9:14:60:3e:bf:ca:45:91:9b:42:9b:
9a:b0:b3:7b:ca:c3:2e:ae:2f:82:b8:0a:6a:7c:72:
5b:59:80:25:47:a2:41:b2:56:4d:32:1d:53:5d:98:
9b:ac:44:2b:b4:d5:5a:dc:0e:bc:3b:0b:36:b7:30:
87:06:de:dd:6b:2f:8e:22:c5:21:e1:13:cc:a2:d4:
11:18:78:f5:39:a1:1a:83:34:ac:93:ba:75:0f:6f:
b8:2a:f0:97:b2:f9:34:74:e8:4b:a5:c6:b9:d5:39:
55:ff:5e:a5:88:f9:61:76:34:df:6f:c9:ad:48:d2:
b5:9b:1f:d5:f1:cf:04:87:cf:f1:ca:83:1b:00:ac:
fc:da:84:a9:b7:6f:97:87:56:da:c6:69:c4:b3:a5:
3b:fd:a9:74:31:96:1e:13:f0:5f:16:90:17:40:b1:
ad:65:9c:f4:e1:1f:f0:28:83:2b:fe:a8:d7:31:98:
69:76:d0:17:3a:a7:b7:01:4e:57:cb:9e:cb:66:79:
d1:7d:ea:25:43:59:80:ec:d1:b7:62:f2:70:9c:46:
10:19:18:5a:83:56:ff:b1:1a:bd:a7:b8:20:f2:75:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F9:07:D7:05:37:2D:72:10:21:7A:63:E1:26:27:35:B9:3A:10:27
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:49:c9:fa:e7:9e:fd:15:48:10:a2:56:68:ab:63:4c:ff:
a4:27:00:d9:22:a6:3b:ce:4c:1d:a6:74:ac:1d:be:36:91:38:
f0:29:a9:52:55:f1:05:0d:ae:09:c5:9b:81:3d:5c:a2:0d:0c:
a4:4f:64:29:a9:9e:f9:bc:80:ce:aa:52:e4:d7:1a:6a:be:d7:
34:1d:9d:10:d1:12:d9:6e:8c:46:3f:f3:7d:b0:cb:64:bf:08:
a9:d4:83:7a:1b:73:96:50:43:0e:94:31:88:aa:78:1f:38:15:
00:64:31:d9:2e:3f:36:7d:36:ac:de:e3:10:a7:e6:46:e0:71:
40:90:9e:09:f4:5d:7c:84:c0:85:92:3a:97:de:c4:65:3a:b9:
f8:d2:1b:d2:cb:a7:d2:b6:10:00:ae:47:2a:09:75:21:5b:64:
a2:6d:d0:83:08:a0:bf:fb:a8:e1:24:20:c1:e0:5c:52:a6:f7:
43:96:fd:ee:50:eb:b0:0f:55:9a:e3:1e:ac:24:d5:a5:5d:29:
c3:4f:31:d5:a0:7c:ec:46:a5:8c:af:0c:66:94:12:37:28:57:
ca:85:58:e7:49:cd:50:d4:f7:da:c0:88:f6:2b:dd:82:e8:2b:
8b:bb:63:ff:1a:5a:eb:17:e9:8f:cf:2d:ad:b2:30:a4:be:d7:
f1:10:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:02:17 2025 by rpki-client