Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: PPLq1smPtC8xkniRV7H/tOU/J9FSqUBrVrk/o3i3N5Q=
Subject key identifier: 50:58:86:68:59:72:F9:75:E2:F4:95:5B:71:10:3C:EC:AA:99:B8:32
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0198D54E10CE1867689DB22858B540BEE476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: i0+i77Qr5cU1wlU2o+nlnxH/jm/HT0VYbnDLBKiehic=)
5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:10:ce:18:67:68:9d:b2:28:58:b5:40:be:e4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=505886685972f975e2f4955b71103cecaa99b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:ea:cd:af:67:23:f7:1f:d6:7c:51:db:38:
fb:4c:9e:fb:29:5f:02:44:ab:60:02:cc:3a:c7:38:
a3:d8:ca:d4:66:14:ad:8b:72:66:2e:7e:91:48:9b:
33:34:d2:8f:98:74:2e:f1:99:a9:c9:1f:20:c6:55:
8e:b4:fc:b5:0b:21:35:ad:43:d0:a6:e3:ac:ee:f8:
e2:73:73:17:21:bd:7a:fd:5d:e8:03:20:ca:6a:b8:
d0:ef:82:d9:1c:52:86:9b:78:02:78:cb:41:6b:c4:
ee:d2:54:7b:3e:84:00:16:d7:17:01:70:91:79:51:
f0:b7:68:46:3f:3e:90:3c:a3:98:19:3e:49:e7:df:
65:b5:07:47:82:bf:75:0e:c0:b3:47:53:aa:5f:8d:
cd:b8:3b:c2:49:03:6c:c9:29:a2:3c:5e:f2:66:fe:
5c:64:9d:8d:d5:c1:01:6e:69:ff:dd:c1:9c:72:bb:
02:f1:b6:f0:c4:96:6e:51:3d:fb:b7:1f:dc:0b:39:
7d:99:3d:9c:89:bf:e3:6d:85:ef:c6:9d:f7:29:80:
23:64:ba:e5:b5:8b:7b:db:67:19:5d:20:84:4e:cf:
9b:af:a3:55:05:d3:41:43:d8:b3:34:e8:ed:0e:01:
59:8e:a5:cc:b5:e1:c8:80:18:fd:07:64:5b:fe:5c:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:58:86:68:59:72:F9:75:E2:F4:95:5B:71:10:3C:EC:AA:99:B8:32
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:fb:18:91:09:a7:9c:87:79:f8:83:f3:97:c9:fb:7b:f8:e8:
de:58:98:5e:33:5a:1d:d1:ac:2f:57:a8:b5:09:2a:d8:23:0e:
1e:5f:c1:f1:79:3d:a1:4f:dd:a0:df:a2:3f:1b:7b:d4:a0:95:
3d:89:6f:51:b3:dd:4b:7d:5c:e1:0f:e4:63:f1:da:fc:6e:29:
c4:f0:47:e1:d7:1a:81:ec:95:5b:39:11:a1:c2:e0:5e:4a:86:
69:4f:c8:50:b0:e9:df:11:38:24:17:03:10:06:01:5d:26:d8:
29:76:6f:bc:89:d0:af:11:bb:81:33:0e:5e:61:9e:bc:bb:db:
07:61:74:80:40:18:5a:7c:ef:f0:68:ea:69:d1:4a:40:9b:37:
6e:19:86:ef:dc:ac:c6:ce:ae:6c:29:79:66:57:17:2b:cc:4e:
bd:31:ee:5e:bc:28:c4:aa:2a:0e:46:52:93:8e:46:3a:04:74:
f3:d2:02:ba:3e:96:60:d7:4b:0a:62:0d:1a:2b:dd:05:15:fb:
de:39:17:e3:15:b3:7b:53:f6:7c:64:80:42:93:1b:5d:a1:0a:
87:24:03:87:a9:c3:0c:72:ce:8e:b9:f0:94:66:6b:f4:1e:5a:
da:8e:79:3b:29:26:fa:37:f9:ef:e6:c4:77:fc:f9:6a:3f:58:
90:0f:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:45 2025 by rpki-client