Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: DMVZbNMVIJC/7sQhM+7vrJQQLdZS8J17fzserWDMx9I=
Subject key identifier: E3:34:E6:87:FF:F0:6F:C8:3F:B8:90:FB:42:B0:8C:31:04:EA:E8:48
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 0198D583F509D65F43FDA8398370839D5794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 15E4
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: rGBmgDk0N4qd2sW2nhBfcvxrCElgBeBx2omToI4P/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f5:09:d6:5f:43:fd:a8:39:83:70:83:9d:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=e334e687fff06fc83fb890fb42b08c3104eae848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:00:95:98:78:fd:01:ae:f1:41:1d:fb:7b:
d9:60:98:92:bb:a9:cc:84:74:44:2f:d9:e1:fe:9c:
e5:41:ba:bd:3d:58:1a:6d:40:3a:69:ec:52:b6:2f:
d9:09:cf:e1:f6:05:e3:41:05:62:66:55:c3:04:07:
8f:ac:22:8c:fd:be:ef:52:e0:ef:32:6e:a0:6c:4f:
fa:ce:b9:3e:95:63:8b:d0:61:54:d9:bc:2c:0c:b1:
d1:fb:7a:08:fb:7b:bf:16:f7:7c:6c:a8:75:06:b6:
fb:08:8f:75:87:65:79:b9:96:16:38:21:46:b3:4a:
e2:33:42:7e:07:51:6e:50:17:f3:43:e1:1c:3f:3e:
93:66:cb:27:80:47:cd:6f:c3:50:f2:36:61:be:67:
46:8e:16:87:64:43:86:a6:45:da:84:cb:b9:0f:84:
ba:6c:4d:72:2f:ce:3d:52:68:6c:74:d5:b7:8c:56:
13:d8:ec:7f:fd:8b:88:15:8b:f3:6a:7c:3c:72:76:
5f:18:41:01:66:fb:6f:dd:54:08:47:54:98:0f:1b:
37:88:fa:bc:67:ce:ba:26:a3:a4:bd:2b:fc:b8:ed:
74:4f:ef:a0:ea:0e:56:4a:67:16:46:19:ad:a2:79:
49:e3:2a:81:90:78:9f:cb:57:b0:9e:b0:6f:76:4c:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:E6:87:FF:F0:6F:C8:3F:B8:90:FB:42:B0:8C:31:04:EA:E8:48
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:06:6d:61:9c:89:cf:90:83:f9:55:7d:c8:dc:74:28:3d:70:
73:2b:ba:d8:cb:f2:48:09:dc:b5:0f:cb:b4:e9:18:d3:61:7a:
c9:95:75:77:e0:f5:53:3e:ea:d5:be:5f:2a:6b:90:f8:0b:43:
7d:10:28:0b:51:32:2c:0f:6e:8a:c0:df:e7:3d:de:21:9f:e9:
10:fe:18:dc:26:5c:e9:ff:97:98:44:67:2a:d8:37:b1:8f:3d:
44:9e:a2:6f:d9:1e:97:53:d8:00:eb:f2:01:28:20:6d:2a:43:
bb:6d:41:9a:71:64:33:c0:d8:bf:d2:ab:92:9e:20:b7:68:87:
72:ca:27:01:fa:29:3b:83:c9:dd:a4:d1:38:10:d0:27:c0:58:
42:a8:b1:25:ab:50:35:f3:59:51:4d:56:0a:3b:f4:24:38:b1:
8d:73:e9:fd:7c:97:a7:f3:19:9e:63:b1:66:c7:3c:93:8c:cd:
e2:f2:84:86:f8:e5:be:15:26:a8:a7:fe:aa:23:22:a7:27:58:
9d:97:3f:60:75:9a:cc:c5:a7:12:d9:c8:57:92:21:be:ff:8d:
cd:a2:bd:b9:1b:78:23:bd:1a:2b:d4:53:dc:ce:4d:0d:26:84:
88:c2:7f:ca:be:01:dc:e3:02:42:2c:dc:a8:c4:b0:31:11:c5:
13:54:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:06 2025 by rpki-client