
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File: ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier: 151b51YZIyj5K8XKjltj5uuLeAs93RmbsZhdsTCmOjM=
Subject key identifier: 25:06:11:7D:BC:42:AC:B0:4A:0D:B7:3D:B6:F9:8F:5E:6F:F0:CA:A5
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial: 0198D6981E54BFC5BF4D73381216676EFCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number: 0577
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: sOdZY8+uaaIUluUgDz16roz33ayj1N9PAyXguCM5rqQ=)
2: omogO-53hv4pnqw4NQwPLhHBlGE.roa (hash: 32U7MfouOBRFQW9pXzlugwtn7uE6295TC/Ncm0R3ehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1e:54:bf:c5:bf:4d:73:38:12:16:67:6e:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=2506117dbc42acb04a0db73db6f98f5e6ff0caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:36:1c:4d:a5:f8:94:d7:5f:3e:ee:40:ce:
8c:e4:db:eb:a3:38:40:ae:04:f1:14:f0:ea:4b:f2:
f6:2f:55:ef:d4:e9:3e:99:a8:75:c2:3b:16:1b:3c:
03:74:45:42:fe:25:35:f9:43:00:78:bb:be:bf:90:
84:1f:66:21:f2:76:73:84:f9:22:98:df:58:5e:d4:
d2:50:ab:b6:09:3d:47:67:6b:0b:69:63:c7:ba:64:
e7:e1:72:9c:0a:32:95:af:ac:06:fc:0b:e8:1b:d2:
0e:6b:d1:a1:1b:0e:53:95:b7:ca:d1:e9:fa:d6:90:
c5:d9:3f:5d:d8:b6:a7:49:8b:37:e4:dc:77:7b:4b:
09:2c:fa:68:a7:69:fa:e2:4d:e3:6d:8c:57:c5:fc:
e6:24:ff:82:4f:73:c6:58:0e:d6:f1:ae:3a:0a:17:
0b:69:60:f1:14:0f:0f:52:93:6e:14:11:69:7d:4a:
ea:4b:62:b0:cb:d2:bd:ed:80:7c:a1:a0:10:47:e9:
1b:f4:ba:8e:b9:7f:4b:26:81:91:cb:62:f7:23:46:
52:ab:b2:cb:d3:f2:6e:eb:52:eb:d9:bf:32:2b:2c:
23:70:3a:ed:d4:c9:6e:b8:88:15:04:89:ec:a3:74:
66:57:b3:7a:f1:b3:2d:8a:28:56:ce:17:c1:01:6a:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:11:7D:BC:42:AC:B0:4A:0D:B7:3D:B6:F9:8F:5E:6F:F0:CA:A5
X509v3 Authority Key Identifier:
keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:46:55:be:21:f0:7a:9f:6c:fa:e8:68:84:5f:7c:9b:64:
90:6d:17:d7:95:72:04:11:b2:36:e6:d5:0d:88:76:63:6f:df:
82:5c:51:17:df:1a:40:51:9d:d7:0c:40:e2:d2:62:a3:24:6f:
cc:b6:d2:ed:23:b2:54:4b:03:b6:4e:f1:26:d3:a4:70:e3:14:
23:09:8f:49:4d:24:78:a8:18:5f:69:80:3a:6c:34:73:4e:f9:
55:6e:55:d6:13:fd:36:56:cd:22:78:6a:af:f5:dd:b3:1b:ee:
17:d1:b4:29:02:e6:d0:21:be:e0:22:f1:bc:55:81:83:09:c1:
36:36:5b:9d:cf:ac:63:8c:3f:b9:c9:72:00:ae:fe:83:fc:06:
69:1c:24:61:87:23:85:8e:ed:23:a2:0e:02:60:86:a1:9b:af:
25:10:96:47:69:60:69:14:40:5b:0b:51:ec:41:89:e6:36:7f:
4b:b1:10:9b:43:b1:f5:13:c1:4d:4b:5d:ef:3d:ca:b7:0a:9b:
06:d9:d6:d7:6c:e6:0a:db:9c:55:0f:71:6e:dc:06:97:0b:b1:
6f:43:5d:19:cc:5e:b5:c1:3b:13:7a:4f:64:c9:7d:ea:df:a9:
96:c6:dc:cf:9e:8b:6f:6a:6c:a4:a4:17:c9:12:f2:d4:1a:e3:
f2:04:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:18 2025 by rpki-client