Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: RvV3YHF1oT5pS40NhfcbREz0CFWq5zJncOv8THhnVio=
Subject key identifier: 6E:7A:C4:40:73:7A:93:76:1E:E5:9C:9E:D8:B5:1B:71:8D:7F:67:10
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0199FD6AF5228C750985EF0CD4878C610D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 17:01:09 +0000
Manifest this update: Sun 19 Oct 2025 17:01:09 +0000
Manifest next update: Mon 20 Oct 2025 17:01:09 +0000
Files and hashes: 1: RA9kR943QDfswVQ2De2E5cFSYaU.roa (hash: jCT5nXHXTc0Nn3QbV8+Qje22n9CHMzdTyZ/tDlKS5Ck=)
2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: w3eAUy6OIP5dAdCH/mrRPB+shR08lmO6vRYk/+LZT50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f5:22:8c:75:09:85:ef:0c:d4:87:8c:61:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Oct 19 17:01:09 2025 GMT
Not After : Oct 20 17:01:09 2025 GMT
Subject: CN=6e7ac440737a93761ee59c9ed8b51b718d7f6710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:bf:f4:44:32:43:d0:98:4f:0b:cd:91:27:
ed:54:11:0d:95:7b:91:03:3d:aa:1a:ae:5e:75:4f:
0e:fb:56:f2:d7:81:e1:be:0a:6f:56:8e:3a:dc:de:
7b:20:e8:de:fb:b7:3c:01:bf:74:16:aa:f8:57:d1:
2b:74:53:56:d4:16:b3:e7:e1:94:9f:d5:04:e1:12:
7e:ed:58:46:f7:4f:a8:71:05:ee:69:bd:e5:79:d9:
f3:a5:e4:6d:6b:e7:81:31:be:31:e3:7c:7b:fe:f3:
cf:92:7a:66:be:65:b0:52:99:04:3a:36:23:3f:84:
45:a5:b2:de:75:0e:84:aa:3d:52:02:4a:b8:88:39:
2d:aa:b4:ee:bb:f6:e0:ef:30:61:e1:8a:11:8e:9a:
6e:94:07:a6:39:02:d7:8f:25:7c:21:b3:47:bb:99:
b7:e4:de:9a:ca:e8:87:37:61:93:64:bf:cc:ac:10:
54:6b:92:c3:0c:76:08:35:0e:99:d1:a7:46:30:4a:
0a:6c:66:07:b0:49:f3:25:0c:19:b0:3c:c5:9b:7a:
5d:b1:61:d6:cd:93:f3:9f:01:71:db:8f:e5:c3:f0:
ae:4d:fa:88:85:8f:3c:57:b2:f5:0c:74:6a:5c:51:
94:97:1c:ff:bb:99:41:c3:c5:d2:5d:f5:ad:20:ec:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:C4:40:73:7A:93:76:1E:E5:9C:9E:D8:B5:1B:71:8D:7F:67:10
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:4a:ac:4b:f5:aa:c7:47:3a:31:26:df:ab:8d:b5:e6:34:
2f:c1:30:70:8a:70:7e:5c:e3:89:18:19:e7:3b:62:8d:c8:31:
6c:24:e6:f7:d5:50:7b:22:9f:a9:fd:7d:93:71:08:4d:26:c4:
02:34:59:e1:c2:ec:25:4e:02:b8:f1:62:da:aa:ee:50:43:d9:
b5:ac:d7:d6:db:79:21:25:5f:79:7f:97:06:f9:0d:20:a1:43:
d3:6b:a5:ec:a1:71:ce:6e:dc:20:b4:26:d0:04:7f:f8:07:c8:
a8:82:f7:1d:43:0b:0d:47:79:f0:b5:46:5a:59:87:8d:f1:51:
e2:b5:e4:12:3e:4c:95:fa:27:13:34:8a:e0:b1:69:0b:25:bd:
ad:2b:37:77:3a:ff:8e:8a:d7:a5:c2:a5:60:33:9c:9b:ab:62:
dc:02:37:c1:ad:4e:b1:63:ee:3f:dd:f5:03:59:72:8a:af:18:
e5:31:77:fc:ed:fa:df:be:3d:bd:79:9f:13:91:6b:ca:73:e4:
ee:be:72:82:3a:c0:ba:ce:2d:b6:8b:09:cb:07:ac:2d:9d:ca:
13:c8:00:a2:42:e3:c4:7e:cd:ef:80:5b:73:df:9f:3f:ce:b5:
51:8f:08:c1:97:cb:0d:38:fa:b4:41:61:6e:0f:4c:b0:6d:c6:
42:2a:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:39 2025 by rpki-client