Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: LaiclNWnvZLJNz78sWya0M0/jhGNeOZvD2xiBt7Z1NE=
Subject key identifier: 86:80:A8:1F:4D:96:53:D4:A5:BF:3D:01:11:85:29:C8:1D:75:EB:C4
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 0198D697F0AC191F23557C934AC49E1B53EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 02D0
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: zjKjSnuD+Rzk1rlVEHux+gts39AIen0hPZ6+Yjx6W2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f0:ac:19:1f:23:55:7c:93:4a:c4:9e:1b:53:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=8680a81f4d9653d4a5bf3d01118529c81d75ebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:13:bd:7b:89:9e:ab:37:f4:c6:f7:4a:e1:
0a:c0:c3:3e:53:db:3f:5d:30:31:48:ca:53:ad:ce:
ac:69:d1:ba:05:a5:aa:78:e7:f6:4a:88:de:79:7d:
a1:01:a3:6f:83:ef:92:fd:86:3c:64:af:b6:5b:d9:
37:22:50:33:09:c0:d9:e5:39:8b:8c:29:cd:ad:ca:
f4:18:9d:e7:a7:45:56:e4:4b:f2:e4:fb:8d:96:65:
be:f3:7f:e2:90:e7:63:2e:5b:cb:bb:00:b7:7c:09:
35:14:49:d7:66:fc:7d:a1:c0:0d:3b:c0:20:23:40:
26:84:5f:4c:56:1a:97:51:89:8d:78:11:6a:23:32:
56:16:eb:06:5b:39:41:e9:e1:aa:90:b1:f0:10:88:
79:2e:6f:61:d2:1d:c1:de:b8:a1:36:55:95:e9:ab:
83:37:0c:b4:1d:48:75:0e:a5:31:ac:24:10:7a:7f:
46:52:a4:78:3f:ba:f4:b1:46:95:c1:0f:f4:96:d6:
c2:6e:6c:2c:44:36:11:cb:cc:9e:99:3d:9b:de:46:
ac:ca:34:93:0b:52:9a:a4:30:16:e3:60:ea:65:eb:
dd:50:71:a7:5d:89:e5:6f:e1:b7:c4:bb:91:8f:ff:
4d:7f:c7:a6:6e:28:0c:5e:89:2c:7c:1f:d4:a7:9f:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:A8:1F:4D:96:53:D4:A5:BF:3D:01:11:85:29:C8:1D:75:EB:C4
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:47:01:13:93:0e:43:ed:88:d2:e1:35:c5:49:dc:47:31:85:
89:04:48:18:b4:34:0c:ed:bc:bf:b8:69:f8:98:43:0c:a6:38:
15:64:21:f2:b4:a5:06:ec:b7:6e:79:92:53:ff:d5:48:3d:06:
56:d2:6a:ca:a8:3a:cc:1b:5b:75:fe:c6:dc:45:b0:b3:e4:2f:
84:23:94:2e:14:a0:53:99:b7:02:3c:28:07:52:0b:0f:82:fc:
28:a7:a5:63:4d:bf:47:b2:37:56:7b:5f:e2:c1:38:59:c3:79:
72:8b:8b:01:37:f5:f6:dc:ed:ba:10:b2:45:80:27:bb:22:26:
8c:70:89:dd:78:15:fa:58:13:13:9b:ba:70:e1:92:32:f2:17:
65:1e:ef:69:7c:60:05:1e:08:c9:80:6c:50:8d:0a:dd:d6:7c:
2e:62:06:36:47:69:46:72:5f:7e:de:1b:79:b4:50:a5:67:1a:
0f:34:5d:e4:65:2b:41:32:bb:5a:8e:8b:53:a2:42:e9:30:98:
0f:70:a3:d5:e4:78:4d:98:c1:dd:7c:45:35:fe:60:cc:2a:e5:
e1:28:f0:63:87:35:d5:51:d4:b6:29:3e:3d:f5:87:3b:7f:7b:
2e:78:63:61:f3:1e:98:1e:ac:63:ed:ba:a5:76:ec:17:d9:3e:
fd:0f:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:41 2025 by rpki-client