
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: ceI9nDQoq0qxdgzA/FL0YNDNfurx3ldWpUHyiddTro0=
Subject key identifier: 62:E8:8A:77:C8:47:5C:46:9E:49:1A:F5:C8:E9:3D:51:2A:12:66:1F
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 0198D583BB687531C54BCA32E183828A5E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: BFpvKhELM78QLCFM7cjT2Dri-Ks.roa (hash: c09KIIz60Nm+dgzrURYFnp6FyV+tcK5Ue3poQFctk+0=)
5: EOa7r-jJgtdz4RGUmunD8B8QB9E.roa (hash: 4iOebAizMatknAk9CDhaCyLQWxnN0bfea5KmgMRwulk=)
6: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
7: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: 4cGDUijdHMP4IF0efL0it92/w09Vr5yyrwaJBlW4N10=)
8: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
9: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bb:68:75:31:c5:4b:ca:32:e1:83:82:8a:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=62e88a77c8475c469e491af5c8e93d512a12661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:56:24:c4:80:75:b0:2d:2d:26:6e:cb:9f:
17:43:c5:eb:26:1a:8c:b7:02:0c:91:cc:fd:a3:72:
7f:41:af:c5:32:9b:62:b9:3b:e1:79:75:fc:35:36:
4d:14:47:89:8a:b4:fb:93:74:59:e5:7f:4e:bc:2f:
6f:a3:58:2e:0b:c6:aa:7f:82:8a:5f:19:07:78:31:
c9:3a:75:3b:fd:f7:79:7b:05:9e:8c:95:da:bc:23:
9d:42:ae:a7:2f:ba:ed:e0:ad:27:49:d6:38:62:f0:
3e:20:9b:da:ef:61:48:f9:54:1e:44:f4:49:be:0f:
76:df:1b:bc:a5:c7:17:4a:c7:eb:9c:69:0b:18:79:
64:5b:b4:8b:45:ed:60:03:5a:a6:8c:68:92:ae:6c:
d3:95:e4:af:b8:a1:35:f9:69:ce:45:a8:d4:74:e2:
88:0e:1a:14:4a:5f:75:fa:10:94:4c:3f:4e:ed:d3:
57:db:65:5e:cc:6d:83:53:78:20:40:0b:68:8e:2f:
85:a8:70:45:2c:bf:36:a2:0f:78:25:50:d7:19:7c:
15:8a:b6:70:9a:75:dd:b5:e6:15:8e:de:8f:c2:d5:
d2:cb:e0:f7:4c:8a:84:da:11:fc:84:8d:a5:1e:40:
f4:db:79:62:fd:a7:2c:2a:31:46:cc:99:db:7b:0c:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:8A:77:C8:47:5C:46:9E:49:1A:F5:C8:E9:3D:51:2A:12:66:1F
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:e7:14:20:c7:35:ff:a6:2b:f0:b1:df:6d:09:96:74:62:
bc:8e:21:0a:fa:35:d8:e1:bb:a6:ce:ad:d5:df:c4:41:83:4f:
fe:a8:4e:af:54:02:46:1a:cf:77:7d:a6:8e:36:8a:2f:ea:e9:
98:39:41:89:12:f1:f6:65:fb:1a:c1:c9:dd:03:25:03:53:26:
8c:d0:96:d8:1a:f8:f6:86:bd:53:2f:87:e0:00:21:85:a8:ca:
2b:44:bc:5d:e5:93:e0:60:27:ad:b5:75:35:e6:a4:3f:e5:07:
a2:0a:78:e1:df:44:8a:a7:b7:dd:f9:fa:95:05:f0:ac:68:af:
02:66:fa:1c:34:48:47:4b:44:7c:a5:89:2a:31:d0:3f:59:03:
08:69:a9:d0:fe:1b:e3:1b:f2:e2:2e:ca:fb:7c:c8:00:6c:8f:
89:69:b4:38:4c:ac:ed:fc:38:e0:55:68:46:76:88:a3:af:10:
43:14:1f:8e:1c:9c:56:f4:13:b0:63:81:66:e6:b1:5c:c0:5b:
43:b9:35:97:12:3b:a4:ec:ca:57:9b:91:5d:42:cd:e3:ad:0f:
3e:68:e0:77:82:f6:83:ec:c6:3d:8e:75:fb:b0:c0:de:56:19:
15:b9:33:90:00:3a:e2:86:00:6b:8d:60:14:6b:4b:31:5a:70:
d6:67:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:45 2025 by rpki-client