Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: 9PvNPOJoD9t95H3V/1M/5ybRK4K8rMRQA0P9BbS1Nfo=
Subject key identifier: D6:48:88:8C:C2:14:58:F0:98:E4:89:11:5E:7E:0B:33:A1:AE:51:F0
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 0198D73ADEAE20E0C60091F1031C2D2B6AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0A46
Signing time: Sat 23 Aug 2025 14:00:16 +0000
Manifest this update: Sat 23 Aug 2025 14:00:16 +0000
Manifest next update: Sun 24 Aug 2025 14:00:16 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: G1/3pHZQPpiCe9X/uLF5y+x5tblwQTM16ZuIx06DfDk=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:de:ae:20:e0:c6:00:91:f1:03:1c:2d:2b:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Aug 23 14:00:16 2025 GMT
Not After : Aug 24 14:00:16 2025 GMT
Subject: CN=d648888cc21458f098e489115e7e0b33a1ae51f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:96:99:df:d4:45:cb:d8:51:95:4f:c6:0a:
5a:b1:84:19:1b:b7:e2:a2:b2:b3:20:9e:79:22:09:
d5:01:da:1e:55:fb:f2:55:ac:0a:9c:9b:62:75:06:
28:f3:6b:bb:f5:fb:35:11:4b:25:0c:d2:99:b6:b5:
f2:7f:68:c1:d2:cc:e8:a9:4d:71:17:67:4c:3d:e0:
07:6e:86:ac:b0:33:ca:c4:4f:7e:0b:21:f2:a9:55:
18:40:37:d4:f7:12:04:e4:50:cf:f5:91:cf:40:8f:
8c:81:40:b5:43:35:57:e2:76:7a:f0:34:ef:13:bc:
62:61:ad:69:88:a4:90:0f:a5:b1:d7:6d:72:56:be:
aa:2d:41:c4:7b:3d:1e:e3:2f:9e:1e:dd:8b:51:d1:
aa:47:df:4c:3c:04:5c:6c:03:f7:c0:07:90:65:2d:
c3:40:0d:75:84:2a:e6:49:23:91:b9:89:11:04:2b:
80:5c:ed:bd:78:58:6a:17:56:3c:bb:58:a6:65:e4:
0c:2b:a3:b5:09:90:cf:1d:c4:f8:85:10:b4:27:79:
ad:7b:01:3c:b6:40:4c:ae:db:4b:96:5b:11:15:ca:
c5:8d:79:25:53:5b:0f:a9:ed:a6:68:4d:f6:36:0f:
d0:6f:8b:56:9d:e3:51:19:64:ef:aa:cc:6b:69:a1:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:88:8C:C2:14:58:F0:98:E4:89:11:5E:7E:0B:33:A1:AE:51:F0
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:38:5f:b9:87:0c:28:e8:30:d4:b5:4d:ae:9c:78:93:e4:fb:
87:df:c3:97:16:15:60:89:9b:24:f0:82:cc:3c:41:65:14:20:
cf:7b:20:b5:f5:ed:74:04:43:41:69:01:c6:6f:30:bf:f0:0e:
8a:e3:b6:e4:9a:10:fc:4a:95:2a:d6:b1:54:e5:50:ac:ad:df:
79:35:88:6a:d6:6d:f7:7b:4e:c7:86:04:eb:3b:04:15:08:4a:
31:b5:df:93:c5:b3:7d:76:eb:75:0b:18:57:6e:49:e2:81:34:
19:f2:0d:83:99:6f:a8:f3:d8:63:66:0a:f8:89:88:e2:5b:72:
f8:4a:9d:e4:ee:72:75:de:b8:86:03:02:3c:6f:97:6b:b7:2e:
aa:8e:af:3f:16:22:5f:2c:88:c2:c2:f8:b3:65:46:79:78:40:
41:74:fe:ed:08:2f:ee:11:34:5f:47:0f:3d:08:c3:06:e1:3f:
dc:3b:64:92:4d:cf:f8:28:0a:ba:64:f3:9e:dc:81:55:1c:99:
86:86:e8:7e:29:a9:de:37:ab:9c:e0:d0:7c:29:da:af:3c:62:
33:3a:6d:d0:6c:dc:d5:2d:03:da:4c:21:3d:0d:4c:c2:fc:9a:
45:da:35:20:8f:de:8a:36:b8:c8:d6:dd:16:53:e3:47:ed:63:
c9:15:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:58 2025 by rpki-client