Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: J5SSovvgrN3V1vrYr+dp3KQrp/E1/Nhw9khA6uco69o=
Subject key identifier: 37:05:A9:3E:EC:B5:46:14:79:D1:EB:04:EC:94:81:7C:C5:C8:DE:D6
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 0198D705B8AD2FA2C0B64B86AF1C90A2B971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: ay6Z5RthPf+ZpHCk+eCKGEyBb5rZeHiQHNvIl1SHaHo=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
3: iGABUqcXXN7aOyjtrZCgc7fQPto.roa (hash: GEJ0Of7uNCnr4mLuQTqHOBw0HqR8tQuPsFCRYfeeMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b8:ad:2f:a2:c0:b6:4b:86:af:1c:90:a2:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=3705a93eecb5461479d1eb04ec94817cc5c8ded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5c:9f:a8:23:3f:85:01:a1:61:92:56:ca:37:
b2:26:b8:2c:43:f5:4b:d1:d2:d2:8c:e4:ec:02:c1:
ac:3c:32:c4:44:80:6e:32:b1:70:78:a6:63:cb:d7:
cb:4a:21:78:63:18:71:7a:5b:ee:c8:3c:ed:0f:df:
61:89:71:e3:22:fe:d1:d5:b7:a4:cb:54:e4:26:ab:
c3:08:d3:b9:f5:6b:a1:54:8a:80:2d:0e:61:a0:e5:
51:c2:9a:15:6d:90:47:aa:81:ec:79:4f:d6:68:86:
2d:68:ba:3e:3e:a7:84:0a:3d:8a:10:ba:2b:3c:df:
2e:f2:11:56:3d:14:59:ef:67:71:53:a1:78:34:10:
78:ed:07:bf:42:55:af:69:ed:91:cd:e7:d2:f8:ef:
df:66:bc:78:ea:e7:a0:ec:d3:a3:f3:f5:66:5c:23:
e6:60:68:01:21:b7:46:5c:0c:d9:52:b2:72:09:eb:
89:66:ee:88:a8:94:c0:8d:25:c0:dd:1f:1d:44:09:
3f:97:1a:d0:6e:91:c0:ad:2f:f8:ce:6f:9a:a1:c3:
67:f2:1f:d5:96:1d:ed:42:6d:95:05:03:0a:d3:73:
bd:55:1d:a1:ef:1d:bc:98:b8:a2:25:90:55:77:b8:
99:b4:d6:f0:0a:24:05:1c:61:7c:a2:03:84:21:1f:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:A9:3E:EC:B5:46:14:79:D1:EB:04:EC:94:81:7C:C5:C8:DE:D6
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cd:42:4c:5c:27:5d:ae:32:08:c0:68:81:ee:ee:34:16:6d:
35:78:73:69:d1:fb:58:c3:57:f4:a9:39:7e:52:91:14:37:76:
71:37:cb:c0:cf:b7:8c:fc:ef:2f:5e:05:27:13:d2:23:5a:10:
64:d9:af:40:f3:7e:f4:f0:e4:3b:a7:d7:2e:2c:65:0b:85:7e:
20:af:11:dd:38:73:13:03:de:03:63:ab:a7:22:1e:64:17:1f:
5d:09:e0:14:bb:9b:7b:da:e1:13:12:11:e9:08:2f:8a:ed:d1:
15:b6:3a:fa:66:ca:ff:25:bc:72:ff:b0:50:bf:27:57:ae:29:
5e:57:0f:33:64:e2:42:1f:b5:9c:75:82:12:c4:b8:93:70:8b:
6a:eb:16:bc:62:4a:b3:6a:1c:f9:b4:2c:35:39:a3:fb:da:51:
6e:d4:6f:b7:7d:00:5f:11:98:54:44:4f:1d:3a:03:55:1a:a5:
2f:15:62:c9:cc:ce:ac:79:3f:9f:87:76:ef:f6:19:e8:fa:9e:
dd:73:2d:c6:98:0b:ea:e0:0d:f1:40:c0:5d:f8:4b:f2:41:ce:
ae:b7:4d:b7:23:83:2b:02:17:3d:62:b1:c6:b6:a8:a4:b3:e5:
84:de:b8:ca:6a:5b:11:7e:f6:6e:04:a1:03:08:6b:60:0a:73:
c6:1c:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:47 2025 by rpki-client