Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: CDFMfRHkqj0/woyX2OnPyZ5jrNB8YMQgh0o7Ln9HVbY=
Subject key identifier: 53:72:A6:0E:15:78:72:13:08:8B:4D:C1:CF:AE:D2:06:41:65:EA:BF
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0198D4A81174D5031DFA6BDA543AC30A57CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: H1Y/F8R23A3XIFvQCSMipOdWPokFYhDJCrkZ12LwQSc=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:11:74:d5:03:1d:fa:6b:da:54:3a:c3:0a:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=5372a60e15787213088b4dc1cfaed2064165eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:30:e6:cf:a6:58:b7:0a:79:c7:50:52:fb:c0:
81:22:47:bd:22:d3:16:16:23:e1:2e:c0:8a:d7:4a:
e1:e2:34:2f:d6:55:00:6b:a6:a4:94:f0:a6:92:95:
e5:c9:0b:52:33:81:0c:f1:18:b0:e6:60:9a:4d:ad:
af:f2:54:0d:0a:31:98:b2:da:cf:ab:48:2a:31:8f:
ac:3e:c2:92:5d:d3:13:1f:4a:81:88:0e:36:c7:5b:
7c:09:44:c1:9c:7c:63:94:98:30:45:b2:33:ef:15:
d6:41:45:26:81:48:72:81:85:28:a3:04:d5:03:d9:
9b:24:68:b8:63:7d:d2:56:ac:50:51:ff:41:66:54:
0b:67:e0:33:e1:e8:40:fd:2e:22:cd:a4:08:73:dc:
6e:54:09:d2:90:1c:b2:d0:5f:23:b9:66:93:51:cb:
4f:e2:8d:2f:87:4f:fb:0f:1c:2f:cc:55:84:8b:42:
17:e0:4e:3a:69:6e:ae:cc:56:cc:10:0e:da:9b:ff:
27:87:91:d8:a2:c8:c2:8e:74:11:ab:38:61:89:aa:
96:f8:33:7f:16:36:46:5f:ff:90:36:e1:ee:07:d2:
67:63:b2:00:41:4a:4b:18:ea:d7:ba:02:f0:6c:c5:
b9:e0:cf:71:38:49:5b:57:21:19:58:5b:68:74:dc:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:A6:0E:15:78:72:13:08:8B:4D:C1:CF:AE:D2:06:41:65:EA:BF
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:5d:87:e5:a9:4e:f6:48:b4:c7:75:56:a5:62:e2:8b:22:
6b:93:4e:80:16:a4:c0:df:d3:ef:f5:1d:1e:51:0b:b4:ab:5c:
c1:93:0f:1d:84:59:b6:d2:35:7a:a4:1d:91:9c:5b:43:67:f7:
40:b0:26:c7:a0:51:a6:ca:79:30:69:e7:db:77:91:47:14:83:
e3:52:8d:03:0e:d6:d0:7b:ad:f0:12:b8:35:bf:c9:f3:55:9d:
d8:3e:15:ea:c9:09:22:54:03:32:19:d9:c7:26:52:76:6e:73:
a5:89:a1:f9:04:a1:9a:11:3f:2c:44:c0:20:15:c5:45:2d:cb:
67:7b:75:fd:ba:a3:d5:59:bc:2e:f7:a4:98:4f:bc:e6:81:d2:
9c:05:c2:f3:e5:ab:43:74:12:5d:6e:30:87:ef:d1:59:c9:f6:
68:9e:e3:d9:d0:1f:ce:1c:c8:ed:96:61:c2:ce:e4:f5:75:8f:
67:4b:91:9b:2d:3f:bc:fd:6d:4f:8c:52:b0:ed:1f:21:03:06:
57:43:13:0f:0e:23:ff:08:af:49:6b:39:ca:d3:e1:d0:bb:52:
f4:fc:49:e4:2c:62:3a:23:7a:7f:22:2d:14:9f:72:23:7d:cc:
ff:5f:a9:67:4e:4c:61:12:39:9f:9b:02:aa:9d:f7:ce:ae:7b:
e7:3c:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:23 2025 by rpki-client