Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: R8z6JI/0evNphWFvr0HyRQkLsFqA0brm4wfOdYPhB5Q=
Subject key identifier: CD:BB:72:56:4E:15:56:B5:61:36:AF:68:3F:78:2B:A3:85:9A:1B:38
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 0198D6605311EE9CAE25F05AE21401822D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:33 +0000
Manifest this update: Sat 23 Aug 2025 10:01:33 +0000
Manifest next update: Sun 24 Aug 2025 10:01:33 +0000
Files and hashes: 1: 7vdGx51ck_YIgYpkt1SPNVfsVKE.roa (hash: Nw+uAqY1I65YKmQSbXqROB23bDhd2atga2x/5hREPHM=)
2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: vD4dfTvHyMimVE9HA2CCHKWVg3TdyA9ol/E77ulCg3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:53:11:ee:9c:ae:25:f0:5a:e2:14:01:82:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Aug 23 10:01:33 2025 GMT
Not After : Aug 24 10:01:33 2025 GMT
Subject: CN=cdbb72564e1556b56136af683f782ba3859a1b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:ee:a5:51:28:b4:6a:96:c4:0c:f1:fd:86:
c9:98:cc:b0:5f:85:86:b9:60:57:0d:51:3e:25:f4:
66:ef:13:00:a7:e6:10:dd:80:1b:3a:2f:f2:16:90:
5f:92:2f:de:5a:e3:10:50:b4:56:82:2e:cd:77:2c:
c5:37:ef:fc:06:e3:4f:4e:c7:d3:2e:aa:91:1e:44:
b4:88:31:ff:a4:35:c8:0a:2a:ef:92:66:b1:06:80:
e4:c0:95:c5:6c:94:19:18:79:87:03:7a:43:0a:0f:
5e:30:54:aa:6c:b0:9e:8d:8c:c1:b6:47:4d:37:aa:
7b:95:d1:b6:a2:1c:b7:f3:a4:01:e5:59:c5:18:00:
e2:3d:26:d4:78:c3:4c:44:7e:5d:02:f0:13:9c:a2:
a0:13:c1:73:d5:17:47:c6:d9:a1:38:26:25:bf:af:
82:36:8d:f7:44:18:fc:18:fc:e3:32:08:f2:2c:23:
87:e6:e8:35:0c:a9:45:35:da:1c:2a:b8:c9:ee:68:
70:b9:43:53:23:5d:6f:b0:e9:cd:e2:aa:94:fd:6f:
2f:fe:64:96:c1:e4:fd:94:f2:54:d2:25:d1:a2:b7:
fc:96:ec:a9:43:b6:0c:df:a0:16:bf:a1:52:fd:a7:
b2:29:09:ac:9f:b5:89:e6:87:28:b4:c5:36:00:04:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:72:56:4E:15:56:B5:61:36:AF:68:3F:78:2B:A3:85:9A:1B:38
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:29:10:c6:c2:83:55:9e:e8:9d:b0:d2:44:6b:f0:35:49:
80:f3:9a:25:f7:ed:5c:ca:e7:82:43:b2:0d:a9:aa:65:68:d3:
1a:35:2b:4d:37:f0:54:99:09:0f:93:a9:8c:98:91:17:27:ea:
2e:e9:01:07:15:ef:e5:ac:a2:50:5a:29:2c:34:f1:79:9a:d4:
ca:90:83:5e:0a:81:57:57:e3:72:4f:b2:d2:7d:91:73:a3:bf:
9d:9e:19:f0:49:d9:ee:63:5e:09:a6:d0:44:0f:8a:0c:47:d3:
9b:fb:ef:06:e3:b7:54:ac:6a:25:9d:4b:13:b2:7a:a7:71:8c:
aa:fa:d8:55:5d:83:43:ce:01:a3:ba:6b:25:8a:db:c3:f9:10:
ad:be:d9:d4:fe:41:53:71:6e:d0:25:fe:c3:27:6e:cd:9c:b7:
e4:f9:4a:09:e9:e6:6c:05:03:36:a3:0d:31:32:3e:76:31:4d:
80:49:31:7a:62:91:ea:9e:cc:51:4b:cd:2b:13:a0:d4:6e:bf:
23:53:4a:6d:c6:d4:37:8f:ca:ba:3b:9a:9a:ba:1d:66:46:98:
95:51:20:2c:c1:a9:82:d2:b5:21:66:60:89:b1:bc:0d:57:9f:
13:58:50:41:4f:46:17:9e:4e:e0:6b:a2:99:fe:e3:4f:0d:31:
e1:bb:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:27 2025 by rpki-client