Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: P5QQ3BqnyYcefh1OvalNQy/KLe64MSZM/yNgljCdvf0=
Subject key identifier: A3:ED:2F:67:43:6D:B8:83:83:BA:3C:22:0C:A7:26:DB:0E:FF:35:49
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 0198D5BBE35730BE8B4B734D190A51463082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: n9YsGDCDpC/4Omws0Bax2hM3eRFS1gUQkjjrsEWtKfw=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e3:57:30:be:8b:4b:73:4d:19:0a:51:46:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=a3ed2f67436db88383ba3c220ca726db0eff3549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:79:42:f5:82:04:d5:0c:24:f8:35:00:a6:
e1:71:03:96:fd:c2:22:3b:99:13:56:c5:60:c7:20:
e7:a7:ba:5b:ab:42:b8:22:03:3e:9f:70:02:c8:24:
0f:fd:db:66:4c:8e:ce:ac:5d:a6:1c:fe:bb:a6:8d:
85:cd:71:4a:ed:42:7d:af:4c:22:35:4a:f7:7e:92:
c6:23:08:9c:80:f6:5b:67:b6:4b:45:ba:46:32:a5:
34:7d:8f:f2:04:6e:06:de:5f:3b:43:06:af:34:50:
db:9f:11:3f:24:ef:eb:ff:8a:9f:e8:15:88:14:07:
88:72:b3:54:4f:98:fd:61:6f:75:1c:5e:27:2a:a3:
cf:62:40:42:54:43:ed:46:5d:04:2b:e9:da:f8:22:
bd:59:51:ec:26:b2:aa:4d:b0:60:62:86:d1:68:23:
29:87:a3:dc:d8:c4:bb:de:22:12:fa:6a:65:b0:39:
84:04:2e:a8:81:ac:de:ec:cc:22:f9:f4:07:86:1f:
82:c7:f9:c5:55:e1:64:4a:90:4d:96:af:3e:8f:74:
4e:5a:58:26:eb:14:a6:62:7e:20:6f:bb:ef:c2:40:
b9:1d:0d:01:58:1f:6e:35:e6:78:b5:d1:ea:b9:87:
b2:d3:f3:16:6e:a6:f7:36:37:7a:2e:d1:18:25:33:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:2F:67:43:6D:B8:83:83:BA:3C:22:0C:A7:26:DB:0E:FF:35:49
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:98:da:2c:ea:2f:23:9b:33:ca:77:af:cf:10:42:c0:91:02:
9e:dd:a6:37:4a:e1:84:4f:14:38:ae:52:5c:9c:b1:e8:06:68:
82:e4:ca:f6:c3:98:d6:5f:d9:0d:0c:cb:e4:7d:d1:e4:34:bb:
69:ed:13:e7:06:ca:96:65:b1:0c:7e:1e:cf:10:95:b8:ec:1b:
a4:72:8a:ef:10:7a:6e:eb:03:1e:90:ba:52:a3:30:7c:1f:ce:
8f:48:9c:13:c2:7f:5f:79:4b:fd:57:50:10:61:c3:d1:1b:ac:
2e:3a:d7:62:a3:f3:7b:84:7f:55:ff:b7:cd:39:ce:91:e0:0f:
20:5a:c7:96:80:6e:6f:09:09:57:30:20:0c:30:8d:22:4e:50:
70:e9:8c:50:81:ea:0f:86:ec:a7:f8:e9:70:cf:60:b9:87:3d:
08:30:3f:4a:03:ae:ad:67:5a:75:f5:3c:ad:6f:4a:e9:79:51:
bb:1a:06:dc:c7:03:99:81:d3:1c:ac:25:b0:1e:d1:91:f8:9b:
c6:94:be:7a:d9:38:72:25:41:65:26:48:d8:9f:1f:9a:32:7b:
4d:3f:25:4a:64:80:30:fe:f1:60:8f:81:d1:8c:e6:e3:79:4d:
e1:29:2f:52:c7:cf:e5:ce:08:86:aa:de:63:ea:86:de:3d:7b:
49:f3:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:31 2025 by rpki-client