Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: dYWHT+2pm8mNwfNgzOgqEHUULOIikWz9cYntoZ4zWsU=
Subject key identifier: 09:0D:6C:65:9A:03:44:02:7E:1F:94:72:C1:D4:69:CF:C2:F7:05:16
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 0198D54E8363EB4F59AE88F045CBDF64AFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: 9Ma3bR6oClQtz66VWMUDOdmF/v43FvU8V6v6EEXfVUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:83:63:eb:4f:59:ae:88:f0:45:cb:df:64:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=090d6c659a0344027e1f9472c1d469cfc2f70516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:fc:70:70:22:2b:26:29:ec:4b:69:6d:32:
95:29:6a:74:07:68:19:bc:b1:ad:4f:76:c7:80:d8:
21:4e:47:76:80:54:aa:ee:ab:14:b1:79:a9:9a:45:
4a:49:bc:13:6a:57:f6:ae:ce:c0:13:0a:1b:3f:32:
f1:b5:ec:b1:d3:cb:79:9f:1c:5f:1f:8b:89:b0:b0:
81:7c:6b:31:cd:d9:1b:01:1d:59:5e:38:6a:70:fc:
e4:48:f3:b2:95:a7:cf:94:dc:20:4e:7b:d9:49:22:
2a:a1:98:c0:67:67:df:c6:18:90:4d:e9:a1:4f:65:
09:3b:8c:ee:e1:d4:3f:ca:75:38:50:de:76:eb:9a:
36:9a:72:51:78:6b:38:95:6f:34:30:13:f5:1b:e3:
13:b7:f1:20:7c:f4:76:f7:40:cf:b9:ab:87:ec:a4:
19:1a:13:38:8d:b4:a9:00:2e:0e:cd:c0:c3:22:18:
2b:5f:30:c6:c6:e9:2d:73:d2:27:c6:5f:71:e7:ae:
4f:30:7c:87:30:f1:86:75:5d:1e:a6:7d:20:a9:7e:
6e:d0:c8:d8:c1:38:d4:ab:16:b9:68:8f:fa:2a:df:
b6:c5:d9:e6:73:e7:0e:5d:b3:28:69:58:1f:c1:5d:
10:d6:42:53:d0:3e:de:58:c7:d2:70:8d:a9:b5:66:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:6C:65:9A:03:44:02:7E:1F:94:72:C1:D4:69:CF:C2:F7:05:16
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:94:5b:c7:36:61:8e:e9:e3:fc:45:c0:5b:be:34:58:18:1b:
6d:17:eb:93:d4:25:62:b9:41:39:8c:65:aa:6c:d4:1c:a9:8b:
f5:3c:3d:a6:8b:da:8a:7f:07:03:00:98:48:db:87:d4:a8:5c:
ae:aa:5f:8a:90:a0:ea:2b:00:77:80:e1:30:73:a2:72:c2:4f:
1e:df:2c:12:e8:3f:2f:00:f9:ce:93:62:37:a8:32:16:ca:4f:
d2:99:ca:c8:e2:72:c2:10:b8:c0:23:4f:01:d4:aa:3d:aa:22:
a8:18:e2:6f:10:83:7a:79:37:0d:26:02:05:bd:db:20:23:f3:
c9:38:bf:49:f5:47:67:eb:49:cb:4e:74:42:1e:91:d7:4d:ef:
31:85:9b:6d:fc:b2:14:c2:7d:80:e8:5c:08:d0:f2:72:3f:53:
ce:77:84:74:22:c2:41:17:8f:26:bf:29:c8:71:e2:a2:95:5e:
d8:c0:e6:ac:b3:f5:7a:24:37:29:b6:4a:97:39:94:af:5e:41:
18:3f:fe:d0:e2:fd:3f:c5:0f:3d:22:8f:3c:dd:2f:2a:b1:18:
8c:96:e5:b2:b8:5b:32:53:59:d3:6f:2e:8d:ce:07:a9:96:11:
e1:88:91:34:1d:2f:74:21:9d:64:fc:6c:09:db:9f:b2:ed:db:
92:87:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:20:59 2025 by rpki-client