Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: fOLSlzpiAhIDFYeMGrLltJU5ZS8wohOlmiLgSl1sDiM=
Subject key identifier: F8:53:44:0B:68:FA:40:68:B5:73:EF:11:97:99:67:09:DD:AB:35:62
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0198D5F1B66116455F7356DA325B50649C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: RA9kR943QDfswVQ2De2E5cFSYaU.roa (hash: jCT5nXHXTc0Nn3QbV8+Qje22n9CHMzdTyZ/tDlKS5Ck=)
2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: 59N2NpqCPDv9O3Z9fFfXMbN897SvNdPtXovMW+fVucs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b6:61:16:45:5f:73:56:da:32:5b:50:64:9c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=f853440b68fa4068b573ef1197996709ddab3562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:62:15:f3:6c:00:e7:dd:8c:9b:ee:4b:ff:
cc:a1:2c:66:a7:60:58:19:d4:4c:8a:a0:46:8b:6e:
5b:a7:a3:df:b8:52:88:73:ba:ee:75:95:cd:d0:55:
e0:f0:4a:30:b8:76:c1:aa:17:f0:de:ab:e7:08:4f:
4b:7d:4c:3e:33:b7:f4:b0:42:b7:9c:ad:a8:c5:a9:
2e:56:8f:b4:0b:be:f6:6d:94:33:0e:6e:75:7f:62:
32:f5:08:ef:ac:a9:1a:82:05:9b:d7:cd:92:87:e7:
b3:16:79:f9:13:99:b5:1e:4f:d0:25:6a:a7:f3:2d:
f4:be:15:dc:67:da:3e:04:81:66:54:e3:43:63:88:
28:34:cb:6a:8b:b8:88:bc:cf:bb:17:fc:25:96:9d:
0b:30:39:31:b5:0c:e3:da:bb:38:6b:1b:b6:c1:00:
bc:2d:b6:bc:56:be:b8:2a:a3:f1:f2:ca:be:6b:58:
36:c8:8d:38:0c:0b:fc:20:9e:51:80:23:3d:16:03:
54:dd:80:77:b2:89:85:1f:35:64:99:3c:f9:0d:e8:
b8:4b:7b:d8:34:a2:35:02:b5:c7:2c:75:7c:c5:9f:
ac:34:c7:6e:d0:38:0f:90:80:62:f9:e7:27:6e:bb:
cf:49:5a:ce:a8:fd:f1:f5:cb:a3:d0:c6:0b:4a:2e:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:44:0B:68:FA:40:68:B5:73:EF:11:97:99:67:09:DD:AB:35:62
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:da:a4:3a:af:7d:4b:f7:23:a9:9f:9a:51:46:60:5d:fc:
9d:b2:82:1f:9d:e9:7f:fc:af:69:f3:a7:c3:09:48:6b:41:70:
fd:4a:35:f6:09:7f:53:10:97:69:44:3c:84:35:75:1d:c6:2d:
aa:b3:fe:74:28:1d:05:08:9d:bd:8f:87:f8:f9:01:57:c4:aa:
ad:43:15:60:b5:27:78:bd:68:78:02:07:01:76:40:64:7f:fc:
2d:16:e2:78:1e:24:02:54:e3:a9:8c:b4:e3:4f:e4:2a:d5:7a:
ff:fb:6d:cc:6c:30:09:4d:77:05:07:0e:e8:5b:8e:b6:17:c0:
02:81:9c:2b:56:6e:4c:1a:98:a6:28:26:f0:6e:db:c5:7f:57:
83:be:af:44:16:9c:ed:92:c2:f1:0e:f9:ff:b8:54:38:7e:ce:
83:04:7e:61:36:a9:d2:2e:6a:e4:5a:52:c7:0b:16:db:06:0a:
fc:6c:72:e8:ab:72:bb:97:80:6c:cb:b5:21:94:fe:5f:41:fc:
07:ba:c4:49:dd:c8:2a:4d:35:45:89:7e:4a:af:66:e0:c5:ce:
da:10:c3:54:03:66:a4:b5:17:f1:59:dd:3d:a4:41:a5:5f:ed:
66:fe:96:be:28:d1:dc:bb:64:2b:1f:8e:ce:05:78:1c:7b:32:
27:eb:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:04 2025 by rpki-client