Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: HJLYuIiM7VnuDainc8y+JAIvJJoaxqQraOnwim9y0IU=
Subject key identifier: 9A:23:A4:46:C1:76:53:FA:A9:F0:DE:74:57:F0:21:AB:D8:17:94:0E
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 0198D6984AB144A13FBBB660FD61F5647E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: L/+c9VFdovyqpCXx5a2ZRTI3gnfw0xB97/GQZd3Kvos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4a:b1:44:a1:3f:bb:b6:60:fd:61:f5:64:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=9a23a446c17653faa9f0de7457f021abd817940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:1c:bf:3e:54:ae:88:74:56:1e:2f:70:85:
b1:31:fa:b6:71:ce:b8:3f:ca:23:cd:b5:a6:a7:6d:
ec:db:90:67:83:30:e9:44:94:51:45:ab:51:e3:9d:
fd:b6:26:a3:42:52:6f:de:3a:6e:f1:02:50:c2:52:
9c:9b:1a:15:47:b5:2c:9a:1f:2c:3f:0e:a8:82:b9:
29:34:45:0c:36:69:69:e3:67:3d:37:fb:c2:3a:6e:
cc:3e:3f:02:7a:02:c8:3b:fd:63:3a:7d:2e:78:b9:
df:0f:5c:51:85:3f:72:9b:a3:7e:ac:a7:83:47:62:
a6:ef:02:72:01:fb:72:31:95:70:38:3f:e0:11:b4:
a2:64:ae:e8:11:8a:2f:2c:85:6c:41:25:44:1d:4d:
88:3b:9d:0c:75:25:cb:22:f9:31:de:bb:87:53:35:
82:db:48:f9:4f:a1:e5:e7:df:66:6c:7a:3c:32:ec:
c4:38:9f:a4:ba:f1:29:f7:d1:2e:68:8f:a3:d2:ea:
4f:35:7c:26:f8:6b:54:9b:68:a0:7d:fc:6e:ab:75:
3b:92:e8:ad:a3:09:4a:ab:8b:1b:0f:66:5b:74:c2:
ec:da:b0:83:1d:b7:6e:90:37:0c:6f:7b:91:13:3f:
c7:dd:f2:c3:ef:98:fb:95:cb:01:19:3e:d6:01:90:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:A4:46:C1:76:53:FA:A9:F0:DE:74:57:F0:21:AB:D8:17:94:0E
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:1d:e2:38:09:2c:7c:5f:06:bf:ac:b2:ed:cc:26:91:e4:
74:7a:ef:b4:2d:27:cb:f0:41:6b:dc:33:89:32:87:55:d1:63:
5a:a6:44:30:1d:56:40:16:7b:04:63:10:6f:c7:25:e6:a9:a8:
ec:2c:7e:74:06:be:bf:15:8b:33:d9:ed:b7:95:52:a1:c9:b6:
cc:06:34:81:00:4a:88:b3:78:a5:65:f1:cd:a9:81:c3:64:04:
78:ca:0b:57:06:4d:cb:28:1b:f8:ba:68:c7:a9:d0:26:87:cf:
d0:bf:51:dd:13:6b:de:3b:b6:ff:61:c7:53:0a:02:b8:ce:a1:
7e:f5:e9:c1:74:9c:53:59:61:e5:fc:68:61:bf:5c:b2:e9:34:
15:3b:14:ab:cb:0c:59:f1:c4:51:a2:1e:78:e6:aa:19:03:d6:
83:37:bf:5c:a2:4e:2f:23:61:f5:48:aa:2e:80:54:3c:78:58:
b2:68:7e:93:97:36:a9:50:bc:44:15:08:56:29:21:8d:13:16:
07:4e:9d:cc:3c:03:26:c0:a2:85:26:d3:65:23:70:58:89:c1:
63:dc:51:b1:f6:d4:22:b2:00:89:97:01:fb:06:c8:c2:fa:3e:
db:66:fe:66:0c:dc:bd:78:bc:45:17:09:96:4e:84:0b:ec:e3:
12:a4:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:54 2025 by rpki-client