Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: 3iKfhT2EXoU/ya011inBwrfkL8s75d52BfwQiJcp8jk=
Subject key identifier: BB:CC:60:AE:8F:66:85:0E:3A:49:4D:31:A5:85:78:0C:9E:45:4D:53
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0198D73B5A4CB369C9C6926F465246AEC88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0D48
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: /34kM/r1+H4W0p75pNu/oEd36mtNSu5fWuUP8+T5BwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5a:4c:b3:69:c9:c6:92:6f:46:52:46:ae:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=bbcc60ae8f66850e3a494d31a585780c9e454d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:68:4c:26:69:4d:e8:81:c0:77:0e:77:9a:
07:ba:02:74:2c:76:79:ae:68:84:ba:11:cf:58:ba:
a8:d4:a7:1a:d5:46:6b:2e:ed:86:cf:3b:0c:09:79:
93:cc:4c:65:4b:68:f1:39:fe:ee:6a:7c:42:fd:cf:
08:d6:00:c1:a1:05:60:42:78:59:1b:db:21:d5:37:
27:9d:50:81:2d:b8:7e:93:85:a3:1f:93:7c:85:d2:
63:26:9c:80:77:9c:01:54:54:7d:75:ea:58:75:19:
d2:d1:34:5b:00:6d:ee:10:c5:5d:ac:d7:83:bf:74:
f7:99:85:1a:a0:a4:e1:20:a2:0a:be:49:9f:a6:99:
af:06:6c:2a:b2:f8:93:03:c5:e8:7b:8f:6c:05:e5:
21:0e:14:23:03:59:0d:59:c6:c0:8e:bf:6e:88:fc:
29:c3:71:c5:5b:41:52:1e:bb:e7:7f:2a:ec:f7:29:
dc:ca:02:10:d1:44:d6:ac:45:64:0d:40:35:b3:e2:
3c:5b:ab:45:70:4e:27:d7:6c:f4:fe:5c:12:57:c2:
e9:36:4b:8d:cb:17:84:05:b3:d4:4f:05:4d:60:ef:
40:f8:f1:a1:20:24:ef:c8:11:c4:59:a8:74:39:a5:
b9:a7:7a:a0:2a:3f:59:8f:9d:07:17:0d:be:30:94:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:60:AE:8F:66:85:0E:3A:49:4D:31:A5:85:78:0C:9E:45:4D:53
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5d:f4:41:28:f8:aa:ac:10:78:de:d7:45:2b:1a:36:df:40:
64:e2:a7:61:8b:bd:84:9c:ee:8b:af:38:d4:3f:26:ae:f6:3a:
1d:2a:a2:f3:fe:6d:f0:8d:e0:f6:a4:34:d8:cf:5a:05:95:6a:
94:96:97:64:01:ec:aa:dd:b7:09:11:c4:e4:29:9f:a8:f9:18:
71:80:2d:3a:de:a7:a3:0c:64:a2:a9:87:67:64:06:97:a0:7c:
49:bd:a9:d7:35:ec:67:9c:5c:02:c3:31:8e:5a:83:5f:bd:1b:
a0:14:7a:43:de:44:95:18:e3:e4:ca:3b:cf:11:ba:c0:db:b4:
64:9e:af:d6:39:53:a6:89:76:0d:a5:77:bf:8a:3b:49:28:80:
bc:35:e8:60:54:92:7d:52:be:1c:4b:34:04:d4:d8:cf:d8:c9:
40:99:91:84:42:c1:a6:37:18:12:3d:be:c3:41:87:b8:af:be:
64:71:0c:76:dc:bb:1b:6e:21:2f:7e:1e:49:a9:6f:20:00:d9:
c0:e4:86:1b:bd:70:a6:5c:8c:8e:9f:ce:8a:0c:25:a6:22:4b:
05:af:46:20:21:4e:29:28:ce:d5:d7:63:ae:12:21:7d:03:80:
30:d8:33:ee:fd:55:83:14:e1:2f:ab:4b:94:9d:bf:d0:85:88:
1b:2e:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:23 2025 by rpki-client