Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: /Mx89bhNOXzJ4RXqjTNUgRznMXWbx6xk2I3WWsRX+jI=
Subject key identifier: 48:4B:26:9D:6F:39:08:A2:7F:1A:88:37:6D:54:4B:44:06:72:F0:92
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 0198D4738AD9AD630365D90D4B241EB44F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0DD3
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: 2gTKdQqI6F6ZpBQA3cTkCgNZYSv77/Il3+6G/HU8gd8=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8a:d9:ad:63:03:65:d9:0d:4b:24:1e:b4:4f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=484b269d6f3908a27f1a88376d544b440672f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:3e:e5:d2:47:d9:73:8b:84:0e:52:33:09:
4d:19:2a:9c:89:43:a0:8b:c0:e5:95:26:c3:42:62:
6b:3d:c4:06:09:79:71:28:bf:b3:e6:0e:f8:7a:fc:
74:cb:71:54:77:11:1c:bf:c1:a4:eb:c1:49:7e:14:
5c:d8:af:ba:e3:98:6a:2c:03:6c:6e:75:06:36:54:
50:41:10:ca:95:6a:ff:6e:9a:0a:0a:e2:1d:09:94:
d6:5a:87:69:02:38:d6:bd:3e:ec:3f:62:5f:46:00:
6d:63:90:2c:56:a5:f9:0b:2d:cc:9e:c2:3b:65:94:
6c:fc:da:9a:28:3b:c2:06:5e:2c:da:26:33:8a:a6:
06:8f:b5:3b:37:07:6a:cd:95:76:0f:a1:d5:fe:ee:
1a:81:3d:1e:2e:23:0b:4d:49:b4:06:16:f6:bc:7a:
cc:e7:0d:1a:5b:96:b1:b7:45:2b:6a:2c:10:d8:05:
2d:83:6f:32:89:f9:1a:ca:26:c2:37:61:d4:f7:44:
cc:4c:e9:41:fa:22:07:87:62:ab:fb:0b:ba:a3:82:
d6:52:02:e4:d3:d0:fb:81:c7:b5:0e:15:15:78:ae:
ee:6a:c0:48:16:35:9b:82:8e:06:f3:7c:53:d7:d7:
aa:28:5e:5a:90:9c:bb:3e:42:19:8c:13:4a:53:83:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:26:9D:6F:39:08:A2:7F:1A:88:37:6D:54:4B:44:06:72:F0:92
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8f:d7:c6:ff:ae:d4:0c:74:82:57:54:05:26:98:e7:fc:a3:
5e:36:00:8c:f8:34:80:c9:04:13:b2:37:7d:e0:18:c4:08:dd:
34:f6:be:c7:6b:16:ba:18:72:32:0b:87:30:37:fe:52:c8:9a:
6b:ab:20:c0:16:80:df:1a:ff:db:ea:d4:0a:b0:55:88:62:08:
5c:eb:c7:d4:33:85:86:79:ca:d9:61:00:c0:e5:c3:7f:40:67:
4a:1f:3d:a5:f1:eb:11:82:2d:32:8c:ab:0e:77:b2:03:86:16:
be:40:c4:60:e3:28:88:a3:44:c5:c4:2c:6e:b4:b2:c1:b2:78:
95:e3:a7:f9:5d:0c:75:bf:e9:c8:31:13:54:ac:4b:24:09:ac:
54:11:78:69:f2:d8:6e:e1:3a:23:c9:f5:29:ea:83:a0:ff:87:
09:82:06:7d:74:35:09:5f:a4:d6:41:6a:35:ca:43:61:0e:58:
b6:98:aa:2c:35:a5:bd:0e:04:f6:c1:9b:18:36:4c:52:d3:e7:
97:f4:7d:34:93:65:a2:9d:50:a9:49:f1:2a:51:d8:7b:70:84:
f6:ec:bf:24:31:26:62:31:5d:e0:90:4e:1d:27:0b:70:2c:48:
ad:50:29:7f:f3:e8:e9:d5:e7:60:58:e5:aa:b2:9c:3a:46:66:
9a:2e:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:25 2025 by rpki-client