Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: xn8fzPFagodG3cXJsuR8P3Q8qCJbRzNGrZc1XRDINws=
Subject key identifier: 73:A9:1D:24:AD:00:27:CE:E5:AC:66:D9:AA:F5:A4:E4:1B:CE:C4:7C
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 0198D40443BBF159DC632B112148C2CD67C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:01:45 +0000
Manifest this update: Fri 22 Aug 2025 23:01:45 +0000
Manifest next update: Sat 23 Aug 2025 23:01:45 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: aVnMnwmQqkNRm2rtKJTwWtaKl1Ohv7mpIgPo8uJG4Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:43:bb:f1:59:dc:63:2b:11:21:48:c2:cd:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Aug 22 23:01:45 2025 GMT
Not After : Aug 23 23:01:45 2025 GMT
Subject: CN=73a91d24ad0027cee5ac66d9aaf5a4e41bcec47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:84:9d:f3:90:70:1f:58:67:85:f3:3c:2a:
bc:a0:f4:95:13:f6:60:5e:a2:ba:d5:ad:df:e1:ef:
49:5f:01:93:24:e3:20:49:1b:ed:42:6f:c4:a9:d9:
9c:4a:ad:6d:14:90:c2:6a:d7:7c:b2:cd:68:fc:5e:
05:4e:43:32:e1:36:77:b4:f1:7d:29:35:00:76:66:
6f:f5:e5:ca:7b:d2:61:07:4f:43:8c:23:2d:31:a6:
37:08:1a:e8:b9:0b:c2:96:13:77:e8:17:be:51:97:
cf:29:81:11:82:2c:74:6b:f5:88:c7:bd:e4:3a:f9:
39:a2:f5:50:57:c1:ec:cf:a9:cd:35:e4:48:3b:e9:
01:df:05:de:ec:65:97:2d:7c:c7:af:1a:1c:1e:62:
2a:da:41:73:da:13:c0:37:9b:ce:7d:78:a2:65:15:
78:70:64:cb:66:e5:74:a8:d1:ec:9c:3a:01:3c:96:
90:37:9e:3a:5c:36:d6:6e:8b:6c:04:99:58:6b:27:
d2:1b:99:7b:b1:8d:73:c7:ac:c8:54:70:7a:61:26:
21:04:44:ca:e4:87:02:ff:fb:e4:de:5c:a8:c9:b2:
c4:f5:ca:f5:52:c6:dc:2a:18:95:57:50:14:87:c9:
14:b8:3a:38:fb:47:f0:68:af:45:8d:6e:94:7c:1b:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:1D:24:AD:00:27:CE:E5:AC:66:D9:AA:F5:A4:E4:1B:CE:C4:7C
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:3e:98:fe:75:a7:81:25:03:df:37:d9:95:86:a4:8d:b0:
06:5b:a5:98:ab:9d:5a:b8:03:b3:46:fe:5c:b0:03:b0:0a:c7:
2a:35:47:58:8c:d4:7e:5f:0d:62:4e:6c:27:0e:1c:33:27:ae:
3e:cd:34:74:50:f1:d5:c4:2a:2f:02:a2:34:81:f6:c3:56:21:
7a:e3:15:d5:23:5d:63:77:4c:11:3d:5d:6b:37:f4:9f:65:89:
b2:ee:90:9b:44:35:2c:3a:47:bd:c9:08:84:42:b9:d2:0d:03:
86:ca:42:92:f8:e9:24:9b:85:a2:63:56:78:71:ca:23:8a:e3:
0b:1a:11:a8:61:41:9f:c5:28:37:b4:4c:8c:82:b2:17:ef:bd:
d9:70:1d:e2:15:e6:e4:6c:79:4f:4a:8b:cc:09:e7:5f:10:93:
3f:86:22:9b:a3:ca:d0:a3:37:10:1f:ea:ea:21:39:0a:1c:90:
cc:f2:e3:35:96:64:9b:1d:76:34:fc:50:49:8a:30:82:19:0d:
65:3c:48:86:26:1f:2e:9c:96:f6:52:a1:66:48:fb:5c:75:8c:
8c:c6:f8:c6:71:7c:53:d0:4a:59:71:48:c6:f9:9c:24:bd:b1:
51:92:ad:77:58:ce:8c:28:5d:7d:ff:31:cc:f2:2e:e4:67:b1:
93:1e:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:56 2025 by rpki-client