Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: HQdozwU3jR6aC7cbi3IkvkZHfGE77/8gNm7t7dJewCI=
Subject key identifier: EE:47:4A:92:21:21:3F:46:93:EF:96:38:88:C2:F4:C8:96:54:FF:68
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 0198D51590036207972D9D03DEC7DFB4AC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 1309
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: WHFekPlm9dRP8p3Kcx+ZrvpO3eF2CQ+IhNVB3eXBulY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:90:03:62:07:97:2d:9d:03:de:c7:df:b4:ac:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=ee474a9221213f4693ef963888c2f4c89654ff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:25:f6:e1:ab:af:0d:05:b2:83:1d:f6:ae:
4c:84:23:37:42:fd:f3:fd:3a:fb:7a:25:98:bc:1d:
0f:c4:ae:8c:3d:1e:33:e6:6f:51:0c:41:c7:15:f0:
69:8e:81:5d:d8:8c:7d:c4:c0:77:28:11:ec:74:3a:
11:5a:af:0e:47:dd:1f:f7:bd:7f:49:38:b9:aa:12:
04:65:87:83:01:dc:d6:ed:5b:60:07:a7:7e:7d:af:
fd:a1:f6:ef:f6:33:25:4d:b2:1b:ee:f6:6d:bc:0f:
7b:da:2d:cb:14:80:95:9e:b5:0a:53:60:f5:b0:00:
51:f7:5f:72:4d:20:56:d7:ff:8c:93:59:fa:d2:13:
aa:c8:35:56:ad:05:3c:e4:d5:fa:c5:37:01:67:f6:
57:8e:15:4a:1b:18:be:53:12:00:73:1d:76:98:46:
6f:dc:f5:a6:4c:46:f2:eb:01:97:e2:88:ad:8d:f3:
33:d2:80:ba:2e:1a:02:0a:1a:7a:4d:94:23:35:95:
e5:d3:c7:e0:db:a0:3b:97:6f:2d:27:50:66:d4:e8:
84:9f:d6:73:56:71:c3:51:e4:88:04:23:23:bb:89:
6c:0b:eb:b5:ff:5e:35:bc:09:3b:27:58:7f:8a:95:
72:2e:bc:d5:63:48:9f:eb:4d:d8:87:20:18:a4:97:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:4A:92:21:21:3F:46:93:EF:96:38:88:C2:F4:C8:96:54:FF:68
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:40:f6:97:2d:0e:b8:ff:53:9b:55:03:b9:0e:13:72:0a:
eb:ca:5b:13:5d:af:ec:ba:8d:f0:28:54:3a:19:3c:0a:a1:88:
de:05:55:a2:5b:fc:3e:f6:e4:49:e1:5d:87:b1:81:17:b9:ca:
36:c4:91:60:1f:07:04:89:5f:da:33:32:56:15:d8:90:e2:d2:
7a:7e:d4:fa:75:53:51:ad:e3:60:91:18:c8:a7:74:f2:22:fd:
ad:f2:0b:1b:37:1e:ba:2f:94:69:33:92:f4:c8:96:da:b5:c5:
8c:e4:8e:a4:0b:30:cd:3b:26:6e:fb:a7:52:f7:96:5c:99:33:
1d:ac:8b:78:2f:bc:d6:25:82:db:c0:05:ca:c4:b7:46:21:4c:
99:c8:72:fb:d5:24:b4:4c:22:48:0e:30:9d:53:08:1f:d1:f7:
61:63:90:55:f1:dd:c3:4c:ce:b5:17:61:ab:e2:23:16:d5:b5:
e4:90:c7:18:17:38:91:e4:d8:34:fa:a6:a5:fa:a4:c1:7d:69:
06:8a:10:1e:8c:03:fb:25:6e:aa:2f:c9:75:7d:3d:a2:21:c0:
4e:0b:be:56:68:e7:12:5c:04:9a:2c:a6:4d:cb:67:30:46:2c:
c1:8e:75:59:2e:c6:17:e7:58:1f:3a:cb:69:52:f8:fa:74:62:
34:34:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:01 2025 by rpki-client