Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: ja5Ay2GYlxxJbGbn9pJtjcEautUfoChG2WPglwfOWus=
Subject key identifier: 5B:FE:A3:EC:B1:96:5B:F7:D2:62:65:5A:96:7F:95:2C:BB:70:20:A2
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 019A03A4701892C2C459EFFEE87A177AAB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 1214
Signing time: Mon 20 Oct 2025 22:01:39 +0000
Manifest this update: Mon 20 Oct 2025 22:01:39 +0000
Manifest next update: Tue 21 Oct 2025 22:01:39 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: /ShIzjdUHwaGIbtQLw/FjG/B9OC/FO6/+Phh8dgmGSk=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:70:18:92:c2:c4:59:ef:fe:e8:7a:17:7a:ab:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Oct 20 22:01:39 2025 GMT
Not After : Oct 21 22:01:39 2025 GMT
Subject: CN=5bfea3ecb1965bf7d262655a967f952cbb7020a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:d6:f1:40:90:74:1d:00:0b:ea:2d:92:86:
28:2d:c5:6c:53:68:bc:7c:3b:82:a5:18:a1:46:28:
9a:26:55:ad:bd:0e:07:cd:bc:0f:1c:9e:f8:df:5e:
d2:99:49:91:de:5e:7f:72:30:db:2d:40:d7:80:50:
1b:20:cc:44:d6:07:b8:80:78:fa:b0:01:01:d7:6c:
61:e0:0f:b1:8f:49:84:6c:25:b5:8f:3a:05:a9:26:
af:e2:2a:01:d1:fe:a7:85:6d:fa:fb:d8:bf:eb:9a:
db:0e:6f:2b:49:dc:10:a3:70:bd:63:c6:fe:b1:3b:
44:83:62:e7:62:b6:82:11:12:09:f3:29:55:98:e0:
cb:ec:65:23:4f:d8:f8:f1:ca:b5:19:db:8c:c1:63:
58:78:c6:b0:d5:bc:cb:96:16:99:23:2f:53:b2:a8:
67:a8:28:ca:c7:17:3d:cb:34:f7:13:2e:46:97:d7:
77:ed:29:9f:ec:00:05:60:22:82:4d:c1:4b:dd:06:
79:84:44:0d:29:5c:fe:35:92:7c:bc:ad:d7:11:a6:
0a:9d:8e:74:5a:f4:a9:da:36:3c:45:b3:14:a2:c3:
29:dd:05:ee:d1:d5:9e:f0:94:b5:65:ce:3a:8f:e6:
2c:3a:52:7d:38:69:61:23:73:be:60:5c:39:eb:7d:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:A3:EC:B1:96:5B:F7:D2:62:65:5A:96:7F:95:2C:BB:70:20:A2
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:ca:1d:96:ca:0b:0f:62:3e:81:fe:8b:e9:94:21:5d:bf:
99:59:8e:81:90:8e:98:37:26:b3:32:28:f2:e3:90:ab:28:56:
db:72:1d:59:da:d8:72:e7:b8:f1:18:64:43:6c:aa:91:c3:fb:
df:d0:db:5f:0c:63:a1:21:23:d6:17:10:b8:ba:dc:49:3f:71:
a9:bd:02:3e:84:6c:17:51:fa:44:7d:8e:d1:27:b1:5c:13:9b:
3f:8b:fe:a9:96:33:13:b0:2d:ed:be:8c:07:f3:91:de:ad:50:
48:7d:c1:96:a8:32:a9:48:82:ad:2a:91:c7:51:79:7b:4d:f1:
e0:5e:4e:dc:bb:d2:0a:a6:61:75:17:a1:20:c2:47:d6:48:f1:
af:b7:a0:99:e3:ec:e6:f7:32:1d:3d:12:30:d0:ab:fe:7c:8d:
ee:0f:b2:4e:87:42:98:e9:8b:d2:9c:68:ef:46:aa:b2:d8:fa:
02:1a:4c:56:30:0d:2b:c5:6e:f4:7f:01:cd:be:d3:c3:30:fa:
e3:5a:c0:dc:3f:2d:16:1a:07:38:6a:22:4c:26:74:a9:d9:02:
3d:b9:f8:7b:f9:7a:8c:ea:3f:83:4d:45:f3:a1:65:ea:33:6e:
d4:69:df:1b:0c:a3:b0:e5:e4:65:22:d0:b7:db:ad:38:2a:79:
51:61:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:38 2025 by rpki-client