Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: v0/hAFAUDhU9VBwEupW7VmdbiOtJW/x4seVuRo159SM=
Subject key identifier: 95:ED:B6:FB:19:FF:F2:61:34:87:D6:C1:58:65:F0:AC:B4:41:C4:7E
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0198D583B8EDC93A74F32CB2E600A4713B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0B00
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: +1XdPTcF2HFFXvzyOoeOxM9KDo7WSC9i2wcm4XilM9w=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b8:ed:c9:3a:74:f3:2c:b2:e6:00:a4:71:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=95edb6fb19fff2613487d6c15865f0acb441c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:cb:ff:e6:ae:01:0e:6f:4e:23:07:b5:7a:
a3:61:12:88:7f:15:5c:66:55:4d:a4:71:b8:20:98:
ed:2a:1f:c2:56:b4:8e:11:63:85:38:de:f1:e9:32:
5a:91:d3:7d:3c:42:ff:c5:ef:a1:39:ca:6b:e7:3b:
91:1b:4a:af:e7:5b:bc:1a:0d:26:e0:dd:79:bc:ef:
d4:2e:24:bd:55:44:6b:fe:69:de:12:01:ef:13:e5:
ff:4c:a9:9b:2d:14:8c:e6:0c:c0:67:e4:26:c7:48:
b5:59:be:79:cc:d3:15:79:30:f2:80:a7:16:96:9c:
7f:d1:cd:ec:2a:6a:cb:cf:87:c3:5d:64:a6:89:dd:
92:0d:2a:2f:d1:d8:20:cd:fb:4b:d0:74:88:41:5e:
ce:10:aa:43:50:0f:bc:b3:eb:3e:3d:94:f1:14:90:
0d:cc:d7:86:f5:0f:47:22:2d:1e:26:4d:dc:49:11:
c2:14:c3:ee:60:18:56:63:2d:ce:cf:1a:08:d4:8c:
87:7c:60:04:87:19:22:72:8d:2a:55:43:29:e5:16:
dd:1e:b7:c0:4b:cb:08:66:58:9f:43:d7:7e:54:6c:
fe:95:e0:7f:c7:30:35:b0:4a:7e:63:b1:ad:00:fa:
c2:53:90:30:25:77:eb:b5:a1:df:05:27:ff:4d:22:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:B6:FB:19:FF:F2:61:34:87:D6:C1:58:65:F0:AC:B4:41:C4:7E
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:9f:c8:e9:3c:91:05:2f:94:d4:27:97:d6:26:ba:90:99:
a7:1b:83:43:92:c3:50:08:61:b9:da:2c:04:c8:a0:cd:ca:3a:
0d:60:be:54:0d:9b:12:a1:d9:9b:28:f4:d1:d7:af:a7:c3:a8:
1a:4b:8c:f1:ed:a7:34:d2:e7:20:a1:d1:2d:2e:2a:95:82:a9:
35:86:94:6b:12:89:a8:90:96:f1:b5:25:71:d9:63:bf:ce:72:
e4:0f:28:af:57:46:81:53:91:0f:de:91:02:01:25:58:b3:d8:
f7:be:3e:4d:dd:fc:27:d3:6b:f2:03:ea:0d:cb:10:15:d3:22:
2e:2f:77:31:df:f2:73:b2:b5:a9:e2:3a:61:b1:0c:98:3e:46:
b8:25:38:c0:22:61:4f:16:f6:ad:9a:2c:17:36:13:46:4d:26:
88:eb:df:38:e7:4a:38:25:33:f4:08:51:14:7d:fd:8b:55:92:
cc:70:59:b3:ae:e2:02:ac:08:49:eb:91:36:1e:4c:21:b9:91:
a2:92:0d:f9:e9:9d:56:c0:b9:21:cd:5f:f6:6e:a2:1b:59:ca:
2f:d1:81:34:e0:84:45:a7:78:e1:71:40:41:92:0c:a4:0e:0b:
4c:5c:4a:4f:46:36:72:78:2e:38:1b:cb:c2:f2:74:68:a3:ab:
d5:4b:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:05 2025 by rpki-client