Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: FJ2NjqaokQRhPghvLJD01XKPUmErnylLa/PagiGalsE=
Subject key identifier: 03:19:F2:43:57:66:4D:0F:96:CE:ED:85:CB:36:BA:5C:FD:57:CA:85
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0198D4738213703436D108C0E1E3826B3614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: 0P9weljuepwjUq+y0kbMrSji5knbnSBrXoGGBnSNxr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:82:13:70:34:36:d1:08:c0:e1:e3:82:6b:36:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=0319f24357664d0f96ceed85cb36ba5cfd57ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:13:89:03:c3:7a:eb:52:ca:10:23:4a:57:
c7:e4:1e:93:80:e7:62:db:99:8a:85:58:29:08:3f:
cc:32:ae:45:9c:e0:db:4c:b5:f0:0a:37:24:89:16:
a3:b1:9a:37:4c:39:c4:af:55:08:2a:7e:e3:66:a0:
4b:51:8b:90:70:1f:ff:b6:e7:c0:d8:70:7c:4f:da:
6e:29:43:8e:75:78:8e:47:9b:00:d7:aa:54:7c:fc:
31:62:e2:1a:3b:93:35:d1:f5:56:f9:0f:97:e7:b3:
2a:31:dc:fe:6f:41:85:cf:35:4d:09:22:10:e7:ac:
79:a7:b0:a5:8b:8c:ab:75:a6:61:66:cb:9c:79:9e:
5c:ba:35:a2:82:f1:cc:f3:a9:b4:5c:72:b0:20:e3:
f9:2d:41:f0:9a:26:a7:e2:93:0b:47:31:04:5b:18:
ca:97:17:af:13:c4:21:fb:59:f1:fc:15:fb:10:99:
3d:6c:3d:9d:35:76:20:76:59:bd:c8:ec:11:9f:9e:
ba:20:90:fc:6c:92:7b:e2:9c:47:75:96:2b:46:5b:
92:e1:39:e6:34:e0:c9:3a:f2:12:c2:1f:bb:cf:52:
c1:66:6f:04:42:20:44:cf:26:ff:f6:2d:59:80:9a:
20:56:80:69:21:c2:e9:23:18:a5:d6:34:1d:97:95:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:F2:43:57:66:4D:0F:96:CE:ED:85:CB:36:BA:5C:FD:57:CA:85
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f8:a0:b9:54:21:19:e2:50:db:1e:34:63:f1:68:ed:37:60:
38:59:4f:d6:60:12:c9:d9:57:fd:19:a0:09:80:dc:fa:aa:19:
84:47:45:c9:8b:89:39:b5:72:67:7c:a2:8c:ea:25:ac:55:47:
de:c7:4c:de:e6:40:57:bc:56:c3:e3:79:28:8d:06:30:3c:92:
1f:4a:ce:ae:2b:cc:7a:15:6e:c1:65:a4:3f:20:bb:a6:b5:c0:
63:15:8c:28:08:dc:dc:3d:69:8a:ad:89:01:68:a5:91:ba:43:
ef:31:ac:7b:90:68:16:5a:9f:4d:7c:75:18:5f:76:74:2e:8d:
f0:2d:92:6f:9d:e5:c3:3f:ba:c3:30:e9:52:5b:80:6d:98:5c:
69:b9:b3:aa:a9:3b:68:bb:50:09:76:75:8b:8e:47:9e:25:a7:
c9:1e:dc:00:50:73:96:a4:e0:2a:27:51:4a:b5:ce:73:4c:5d:
c8:92:dc:7d:ee:e2:96:61:5c:ee:4d:b2:2e:7a:93:3f:8e:5e:
05:5b:d3:95:62:fe:9e:1d:e4:a4:5d:21:4a:c7:1a:cd:03:e3:
cf:6a:36:73:08:a9:0d:ac:a5:67:2e:3d:e2:a6:9b:b4:58:3d:
55:bc:69:7a:e9:6a:73:d0:57:78:02:15:c2:d1:1c:96:ac:92:
f5:21:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:19 2025 by rpki-client