Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: xxo6cEuG3/Gu0LZtGUCj/AA0afzKa3D5Pfe8dL1HSpU=
Subject key identifier: 7B:FB:ED:28:D5:3D:CF:A9:9D:42:ED:CE:D3:1A:A2:54:CF:9A:B4:A4
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 0198D4A7A3545415DC0B608594DE23BD0051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 05C2
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: lU3BMmZYt13yOwkFIWLVS9sszJMvyImgmq9zcFP+GKI=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a3:54:54:15:dc:0b:60:85:94:de:23:bd:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=7bfbed28d53dcfa99d42edced31aa254cf9ab4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:68:e2:a8:0e:ba:ca:ce:bc:a2:a0:63:35:
c6:c6:55:12:f6:44:66:41:80:06:4b:41:aa:ef:5d:
66:75:00:c5:be:55:b9:3f:99:80:cf:1c:ab:02:1d:
72:55:81:fa:47:3d:23:6a:e2:38:ba:d2:2f:44:97:
82:ef:36:d6:46:71:53:9b:ff:57:3c:30:b2:1c:16:
87:33:9a:2c:77:36:9c:72:c8:fb:4f:ed:75:45:ea:
8f:e1:cd:7a:69:9d:82:a2:6e:3e:1c:7b:8e:20:7d:
b9:cb:c8:e6:c4:09:ba:65:fd:d8:fc:f1:c2:cc:8f:
7c:09:c2:15:d1:f1:ae:12:46:d9:b9:7e:16:83:c8:
3e:68:b3:12:9c:16:e1:69:67:29:17:ce:61:3c:29:
f2:1b:e7:d1:de:aa:64:22:34:1b:a4:74:e6:38:6d:
d3:b3:ec:13:ba:ce:c2:99:72:c3:3d:f2:8d:0e:9a:
90:3d:04:c1:26:e7:40:7c:a5:71:7d:a1:6a:2a:a6:
7b:52:bf:0a:41:99:56:c2:4d:aa:04:c5:8d:9d:6e:
2a:2a:c2:ef:f7:b2:c3:15:24:61:65:85:d8:0b:90:
d0:36:80:fc:c0:69:81:fa:b4:c9:e9:8f:0c:de:4f:
2e:26:ec:f0:f1:b0:0a:64:2f:00:c7:e8:b0:96:d1:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FB:ED:28:D5:3D:CF:A9:9D:42:ED:CE:D3:1A:A2:54:CF:9A:B4:A4
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:4e:92:2d:23:d8:39:6b:ce:d2:0d:67:14:d6:76:2f:0d:
e6:4d:e4:dd:45:74:1d:fc:21:8f:23:b7:a5:67:52:21:f4:fb:
5f:b4:c3:3c:20:64:5c:38:82:ed:9d:ac:fc:ee:b1:cf:e3:4e:
23:44:0b:3f:b6:b5:b6:2a:9c:16:79:93:48:64:ca:65:d9:b6:
36:70:87:ad:07:41:8f:17:f9:72:8b:3b:8f:80:aa:64:3c:1d:
6f:c2:9e:4e:e0:82:e7:f4:ab:6d:7b:d8:0a:6b:4c:26:a8:27:
1a:77:07:2f:3a:99:b1:d4:56:2f:d3:6d:bd:f8:1c:bd:c5:bf:
26:e6:a5:3d:eb:72:c6:54:c6:e0:b0:d3:b9:5a:03:aa:49:b1:
1e:7f:d2:74:a6:2d:50:de:f0:0a:0c:6d:85:8d:ef:e6:94:d6:
43:6d:06:0a:bd:fe:40:1d:d4:20:21:c9:17:50:c8:62:62:67:
98:01:da:c8:74:6c:56:0d:56:fd:1d:e5:cb:8d:bc:07:00:b9:
64:70:71:eb:7d:39:3d:0e:34:5d:93:55:f0:ee:9d:5a:04:30:
22:79:0f:4e:79:81:f5:2f:e4:16:5f:01:25:19:c0:8f:78:f0:
eb:a5:74:f2:af:a1:0f:3e:ac:0d:43:98:6e:5f:f9:69:a7:bd:
35:3d:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:10 2025 by rpki-client