Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: n4bTj6vyNUpTmxPTiuNESwM6psMdWN5M2PuItdlgGTY=
Subject key identifier: C8:67:32:C7:09:25:43:B2:B5:C2:1E:64:7B:F1:68:AA:95:9B:26:13
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0198D660652D00F2CF5D25892B310AAFEC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 134A
Signing time: Sat 23 Aug 2025 10:01:38 +0000
Manifest this update: Sat 23 Aug 2025 10:01:38 +0000
Manifest next update: Sun 24 Aug 2025 10:01:38 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: kup+UTZXcbTh/ckJwYaKBCcMLeD8sTjeg6cbmW/8h6o=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:65:2d:00:f2:cf:5d:25:89:2b:31:0a:af:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Aug 23 10:01:38 2025 GMT
Not After : Aug 24 10:01:38 2025 GMT
Subject: CN=c86732c7092543b2b5c21e647bf168aa959b2613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:c9:c7:9a:ec:3b:cb:f5:88:2c:89:1c:0b:
9d:0a:ee:02:db:f4:00:b1:1f:fa:ab:b1:7f:dd:a4:
fe:53:22:bc:de:54:58:bd:6a:3a:83:41:33:78:c7:
bc:7a:38:77:fd:47:36:05:d2:83:0e:6c:d0:cc:08:
a9:3c:b2:e7:be:36:3c:ae:8d:6a:4e:98:f6:59:66:
fa:58:6e:b9:1c:95:3b:a2:51:1e:b7:62:3c:8e:3d:
5f:cb:44:ec:e5:3d:93:43:de:81:75:aa:93:dc:0c:
2e:bc:eb:16:2e:81:e5:c9:8b:6c:08:6e:53:42:cd:
77:d7:ff:f4:70:d9:14:a6:99:c6:6f:5a:3d:bd:e5:
57:8f:1b:45:ae:bb:3e:bc:74:dd:04:f3:6d:b9:13:
b8:2c:42:c2:a6:0f:2c:b3:6c:90:94:1e:ba:21:64:
df:15:29:51:6c:4c:b8:43:40:45:c6:fb:ea:14:7e:
03:0a:1f:6f:53:81:c9:e5:0f:d9:22:a4:62:d0:de:
75:e1:11:1f:36:bf:4a:3b:57:3e:55:fa:a8:21:0a:
3e:45:0c:05:0c:58:d9:56:3f:a1:6f:a4:c1:4b:fa:
2d:1c:15:49:32:ec:51:8f:6c:84:41:03:3d:13:42:
ec:f8:d0:fd:1d:a0:8b:a9:86:b1:6e:4f:fe:7d:64:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:67:32:C7:09:25:43:B2:B5:C2:1E:64:7B:F1:68:AA:95:9B:26:13
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:3a:5c:f2:28:53:5c:a0:48:15:6a:3a:9b:47:57:80:66:
5b:73:62:1b:4a:bb:51:3c:7c:a1:41:66:95:59:18:67:50:ef:
f9:8f:bd:e2:f8:80:4e:07:21:3e:e7:69:d9:96:59:f9:99:80:
a0:9a:4b:07:75:9b:9c:4a:44:c1:d2:82:8d:c1:4f:7c:fe:70:
0a:4a:37:d6:a9:78:e9:ba:c2:84:64:9f:6a:cc:60:95:eb:0a:
80:ad:83:68:3f:13:d9:00:63:38:56:8b:3e:8a:07:cb:c4:08:
dc:a4:8f:ef:52:5c:4a:a6:ae:0d:fc:2e:13:6d:e0:fb:f1:39:
75:29:ea:f3:7a:34:4b:cf:f3:bc:b6:72:b2:40:c4:3a:29:3c:
8e:d8:13:8d:f8:28:9c:64:e5:9a:c9:cd:2e:9a:fb:94:0b:dd:
e3:b0:b7:95:d8:32:3e:84:ba:4b:2b:6d:e2:cc:ff:87:af:f2:
ec:67:c4:19:45:ad:e9:18:a2:3b:9d:90:1c:67:b4:96:4b:f4:
39:21:58:80:28:a6:da:96:90:77:1d:02:77:d1:e3:e8:98:df:
a6:48:11:23:66:a2:82:8c:bf:dd:1a:ec:27:1c:29:15:aa:92:
60:55:06:bd:55:c2:66:c0:16:ad:e5:c9:5e:b7:7b:4d:21:2b:
7e:23:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:37 2025 by rpki-client