Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: tlIXTrRBkK3bcmipolls66UHoTb89omGug4YNsSoAKw=
Subject key identifier: 32:67:BC:7B:A7:0D:D7:9A:12:45:2E:5A:7D:F3:91:57:E2:72:E9:88
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0198D65F3E4AD678118185872D962AABE245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0240
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 8bTiNRlED6zpm6WVlc0eP7BnxyEWSirvY11kmz//2tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3e:4a:d6:78:11:81:85:87:2d:96:2a:ab:e2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=3267bc7ba70dd79a12452e5a7df39157e272e988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:da:33:2d:ef:da:76:72:d0:5a:d8:a4:6f:
b7:bc:14:62:20:7d:57:0d:9a:0b:30:c4:6c:81:c0:
5c:d4:13:4f:24:57:65:77:fd:e9:0f:3a:fa:fe:17:
d9:cc:76:dd:9d:64:1a:d8:94:f4:e5:e7:38:0f:72:
d0:0e:3f:bd:c0:be:c8:f7:20:7c:8b:03:17:51:41:
d7:78:57:1f:04:9c:7a:ee:d3:1a:83:80:cc:f1:8b:
b5:42:39:1f:99:1d:d5:c4:97:b3:df:6d:db:5d:4a:
d7:dc:48:57:60:19:04:29:3a:17:4f:30:7d:ca:b7:
4a:2c:e3:60:dd:9e:4b:51:96:a2:12:f1:07:79:53:
06:54:27:3d:d7:ae:15:fe:da:36:6b:9a:56:85:c7:
08:27:47:2d:a5:2e:bf:5f:74:1c:84:97:d0:84:17:
49:df:1c:c5:54:1a:a9:9b:e9:08:1d:5b:bb:be:74:
e7:56:db:b6:58:af:af:e8:77:f5:7c:bf:9d:14:a2:
af:e3:97:a9:2a:be:cd:5f:a2:63:c7:9c:18:3a:25:
f6:35:67:73:7f:36:e1:29:56:cc:58:e8:f9:ac:7b:
c3:44:dc:57:61:a6:ff:93:a6:f0:bb:bc:af:03:62:
04:5e:5f:5c:79:8a:1c:10:71:5a:25:db:0c:e9:26:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:BC:7B:A7:0D:D7:9A:12:45:2E:5A:7D:F3:91:57:E2:72:E9:88
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:35:fa:c6:55:98:62:e1:c2:8d:3c:8f:21:a9:ed:64:ad:ca:
ea:3e:3d:ef:f3:a4:d9:50:20:d6:0b:b7:36:59:10:73:a2:20:
c1:84:fd:51:8a:13:61:2e:c7:91:9f:ec:a0:32:f1:b7:78:35:
a8:2f:a1:d8:f9:53:10:9f:13:84:31:72:dd:94:9a:3e:72:3a:
e4:c3:14:7d:5c:dd:72:52:dd:7c:d4:c6:7a:f1:05:d3:73:20:
7b:d4:51:69:52:f0:47:51:93:fa:20:68:7f:78:a7:f0:ad:27:
49:07:64:e6:84:6f:36:58:fd:9d:b3:a3:a8:a1:d1:55:5b:9d:
ca:20:68:74:f9:37:be:fb:46:bd:c5:ac:09:0c:8f:94:84:81:
a2:22:07:7e:45:5c:3e:5f:dd:96:6e:26:31:7a:01:1e:fc:02:
24:9e:1f:39:92:67:48:4c:a7:5a:cc:19:ca:8c:48:1b:29:99:
e5:de:fc:5b:45:47:74:1a:d5:22:f0:2f:5d:81:d4:f2:96:aa:
e1:03:12:90:4b:2f:cf:7a:57:ba:38:44:6b:c1:38:e0:f3:b6:
c8:83:45:c7:d1:20:f5:15:b5:ea:d4:ec:99:18:6f:f3:e3:67:
b3:79:37:13:a6:1f:ed:d7:16:5d:3d:b3:d4:93:38:54:9f:c8:
88:af:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:11 2025 by rpki-client