Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: DxIoVZ2Y8IH96+Jnojmlo9RKJrO7sqY069wnvk6v4KY=
Subject key identifier: D1:23:E9:CB:4C:E2:65:16:95:56:94:C0:9D:40:15:97:7E:84:E2:6F
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 0198D5BC3B30E5582F34DC2E1FDF46E25E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 01E9
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: u4w2gmuwgyB+ozCbvtuQm6yV5kd1OEedYiDKu+T81IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3b:30:e5:58:2f:34:dc:2e:1f:df:46:e2:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=d123e9cb4ce26516955694c09d4015977e84e26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:89:64:c6:08:e7:d1:c0:55:45:8b:21:12:
86:a1:3b:d9:75:f2:7c:e1:80:28:2d:33:1c:54:e7:
ab:82:b3:2a:0e:7d:28:14:b6:c6:5f:d2:15:ee:b8:
ab:c3:81:56:e8:09:08:e0:72:02:5f:80:f9:6c:87:
17:ef:72:35:da:f8:3a:e9:2d:b3:c9:64:e3:a2:bd:
10:33:41:5e:a3:a3:d7:f4:b9:2d:40:1f:67:ce:c1:
cd:ee:2d:ac:9c:12:34:03:5d:8c:72:ab:65:3b:89:
6c:9f:bf:60:57:9a:ca:d8:dd:3c:16:11:3d:fc:ad:
e9:3e:d2:b3:1d:2a:d2:0e:c6:d0:60:9c:07:59:ff:
4c:67:04:5d:8c:87:7e:71:27:14:c2:b1:30:8e:c1:
3a:f9:34:d1:e2:ef:93:b4:1c:ae:03:bc:e7:3b:41:
33:17:bc:e4:7b:c4:6f:c7:95:00:19:55:b0:61:c0:
7e:d8:05:00:5b:3c:20:a7:d6:1e:6d:88:00:04:7d:
27:e8:f1:73:d4:4f:b4:a6:ef:6f:69:53:c1:8d:88:
12:97:af:40:f7:e1:3b:e9:bc:34:25:26:5e:41:8a:
2f:50:aa:14:3a:80:d1:07:c3:ae:e9:4c:5c:bd:33:
d1:0a:9e:68:06:7e:98:f3:3c:a7:a3:1d:db:21:29:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:E9:CB:4C:E2:65:16:95:56:94:C0:9D:40:15:97:7E:84:E2:6F
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b1:2e:fa:9c:3f:cb:aa:ea:52:67:b0:b4:e2:28:5b:e9:9f:
d1:ac:6d:d0:c5:4e:63:37:e4:5e:50:2e:25:45:a9:7a:ce:2f:
61:ba:74:be:64:5c:6b:eb:36:34:18:18:9e:d4:d9:2e:e0:9a:
ff:c4:46:14:5f:5c:ae:01:90:00:83:57:2a:5f:86:4d:f8:30:
fe:f4:89:27:d4:1f:9f:d6:e3:28:a1:28:a5:e3:20:ca:18:1c:
ce:b7:7f:7f:15:43:c5:5e:ec:e9:bb:df:ea:8e:dc:08:e1:b4:
54:c2:2e:f1:51:e7:31:fd:5d:55:bd:e6:10:d5:05:a9:b8:bf:
cd:66:7f:f6:3c:c1:ed:9a:c9:26:90:9f:30:c9:c3:ed:90:7e:
ab:af:a0:8d:2a:32:38:c4:23:b2:7a:b0:c1:64:79:1f:6d:55:
8f:1c:ac:97:0c:ac:ba:88:8f:e7:f3:c4:46:4e:61:c7:38:35:
6f:a4:70:15:dc:f3:da:5e:86:4b:71:08:d9:78:01:ff:f3:99:
9b:e7:f5:c6:ee:85:bf:9b:82:59:ea:94:12:48:79:21:f5:c5:
0e:52:fc:ee:d7:3e:f7:f9:f6:a4:03:0e:39:9b:97:23:09:b1:
d1:58:0a:6b:91:fd:40:4b:bc:84:f7:14:4f:c3:90:58:6e:84:
b3:a3:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:15 2025 by rpki-client