Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: Y+Grz4aEWIZFkzJa887euKsQUbnA+iWWsuoWYyyD0BA=
Subject key identifier: 20:99:9E:5C:37:46:08:9D:68:9B:79:76:90:F6:FB:23:16:7F:33:99
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 0198D54DCEE027B09B2914A14EB1D318FE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 088A
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: iqEsgpmqs1BeoqXZSAS+UzU3WrfJEVDd9CIchMUAYPI=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ce:e0:27:b0:9b:29:14:a1:4e:b1:d3:18:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=20999e5c3746089d689b797690f6fb23167f3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:d7:ce:10:15:ec:be:31:e4:33:6b:79:74:
79:e1:95:4f:5e:86:5a:b2:ce:fe:36:f5:40:ce:e8:
65:e2:86:08:04:3d:53:33:84:94:1c:61:aa:01:58:
76:b7:f4:04:f2:4e:56:ce:d8:e5:2f:c3:01:9a:8f:
66:d1:ba:4f:d2:80:88:92:89:93:65:ee:a6:44:79:
55:3c:de:ab:e5:aa:02:be:5a:1c:91:93:f8:37:07:
05:a7:db:b7:1c:5b:6f:8e:78:21:6f:58:0d:a8:8a:
22:e1:af:09:4e:48:82:b6:05:cc:62:33:78:ed:aa:
bb:4a:4e:99:c9:74:b3:39:a1:af:07:49:8b:84:ed:
f2:26:d3:5f:44:99:17:8a:63:5d:5c:cc:5c:fc:dd:
92:95:1a:79:44:e7:be:ff:2e:2a:c3:db:24:2c:97:
9f:af:a9:34:36:66:0a:d3:2d:9d:ba:a5:9c:e8:93:
8d:de:48:de:40:9f:36:08:8a:77:25:03:89:1b:a3:
48:46:83:55:7e:58:88:48:aa:0f:bd:44:66:f0:7f:
e5:91:19:e7:8b:98:e8:6d:6e:87:ff:43:89:a9:c2:
54:b8:16:92:e0:8c:89:e0:a7:3b:e9:23:24:17:85:
0c:d0:b4:0c:1c:57:85:2a:73:89:1e:21:3b:bb:e7:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:9E:5C:37:46:08:9D:68:9B:79:76:90:F6:FB:23:16:7F:33:99
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:75:6d:c0:44:e6:54:c0:16:0e:62:c3:da:b1:0d:df:81:81:
f1:62:31:b9:87:37:40:9e:b1:c0:41:ea:6e:ed:3e:cf:8e:c6:
6b:c5:87:37:7d:79:9f:ee:0d:44:00:ce:dd:dc:3e:fe:89:99:
18:e9:48:4f:d8:67:1d:2b:93:d3:4c:59:03:6f:35:58:56:d5:
3e:67:7f:e4:d5:52:f3:6d:d5:bc:36:84:5f:d3:9e:5a:47:8f:
9c:ff:33:ce:aa:f5:25:94:bb:cc:b4:e6:07:eb:94:73:e2:28:
4c:2f:fc:d6:60:45:2e:5f:7f:da:60:5b:9a:9a:ed:df:7f:04:
d1:4d:52:c1:5b:83:38:4d:b5:be:8a:a3:ea:e7:f1:33:6d:a7:
fd:fb:09:29:13:e6:c2:59:12:00:32:2a:f6:d6:17:24:17:ee:
1b:6c:da:84:86:92:66:b2:1e:bb:5b:ca:d9:e6:b8:89:3f:67:
49:b1:45:68:35:ec:03:eb:61:9b:bd:17:c2:11:f7:2e:8f:fb:
ce:11:b2:c0:a2:39:d2:5d:7c:26:1e:0f:b9:f9:7f:2c:e4:6a:
60:e3:02:59:e7:10:44:0c:7c:94:63:28:b0:d0:e1:cc:37:19:
03:39:82:04:bd:ae:68:34:02:2a:65:f9:70:7e:d8:c1:54:05:
ca:cc:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:13 2025 by rpki-client