Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: moskYsGijeZVoV+7mxxBb5Um20InjwLd27uk1/09Pco=
Subject key identifier: AA:F2:D2:0D:EB:D2:9B:6C:83:73:0F:92:24:4B:6C:4B:7B:00:9E:2B
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0198D51628AD0BF4D859B65A0AA15834AAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: fL8vEL4Fl3ElDNb1lxQlxGzOsJsfHUzOi6dkxabUvs8=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
8: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:28:ad:0b:f4:d8:59:b6:5a:0a:a1:58:34:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=aaf2d20debd29b6c83730f92244b6c4b7b009e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:a6:1a:c1:eb:16:a2:68:a5:0a:da:b0:61:
67:9b:ba:3b:9d:8e:2e:c5:43:c8:01:86:e1:82:a2:
ff:88:60:39:88:d4:d1:58:21:f8:11:8b:2a:32:53:
23:5b:9b:cb:f7:9f:fc:64:7e:94:53:e4:e3:f4:c6:
08:8b:90:bf:f6:4d:2b:85:96:c5:0b:90:55:5b:30:
3a:f2:8b:ed:f7:f4:82:b0:5b:66:6d:56:46:07:a9:
75:ca:1a:a4:cf:2f:a8:f0:e9:2c:fe:b7:47:19:64:
9a:98:94:79:0a:b5:25:9f:6d:5c:bd:af:50:43:7a:
13:26:38:d2:a5:09:65:2a:0a:c8:fb:f4:94:18:2b:
d8:76:1d:72:2a:7f:3c:a8:59:fb:34:9e:7e:78:37:
c4:49:1f:a3:b3:6a:fc:cb:96:5e:a9:b5:78:8e:af:
96:3f:78:a1:06:4e:b6:e4:20:1e:72:34:ff:28:8a:
27:e5:57:36:0e:e7:1f:86:57:9f:7e:69:d6:87:b3:
9e:28:cd:d6:10:03:18:0e:90:4b:62:c2:49:c6:00:
7a:0e:b9:98:ee:20:c9:43:49:4a:e4:10:f8:74:c2:
e4:67:d2:54:0e:95:3a:41:9a:44:9c:a5:c2:61:da:
de:55:02:cb:40:06:34:cb:3b:6b:83:61:d9:7e:05:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:D2:0D:EB:D2:9B:6C:83:73:0F:92:24:4B:6C:4B:7B:00:9E:2B
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:af:3f:1c:dd:73:15:01:49:fb:06:62:fc:ef:db:ae:ed:
3c:d7:b6:f2:bb:6a:e7:b1:8a:93:c8:1a:85:ba:97:7e:d6:a0:
73:d1:f5:95:0d:b5:b4:69:c4:9f:be:c7:21:61:9d:7e:20:98:
64:8e:e8:65:44:3e:c8:4a:ae:8e:70:be:06:76:13:1d:42:b8:
7e:d1:3f:9d:8f:0b:5c:c8:91:0e:33:90:6e:2d:ed:d7:82:4b:
3b:04:26:91:97:68:ef:01:04:ec:68:ee:18:fe:b7:82:6f:f6:
72:d0:9d:ff:39:8b:67:7e:71:f2:38:c0:79:3c:71:20:0a:11:
5e:4b:62:cb:c4:2b:26:1e:c1:8a:4b:d4:de:f2:27:2f:cb:10:
df:cd:62:1c:97:43:51:a8:86:53:45:9d:14:78:c2:b2:94:7b:
32:1e:cd:c5:71:7e:44:ae:eb:7a:64:8c:5e:c2:93:d9:57:72:
3c:76:ae:a8:77:c0:65:e0:7a:54:25:52:a2:3e:d3:b3:b3:6a:
78:2e:e5:9e:9a:61:4c:4e:56:3c:78:d6:29:70:90:39:4d:2a:
35:b0:94:17:5b:27:fa:33:b6:45:01:76:47:19:47:70:ff:c6:
52:9a:04:7f:1f:80:c3:e6:88:57:f7:32:ce:a9:39:00:b8:39:
c0:4e:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:48 2025 by rpki-client