Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: zYZDaym2cfxLQ67YPCkDQVcqhFokunIs4rBn6FuM0YY=
Subject key identifier: DD:F0:11:7E:F7:79:41:8E:FB:D4:24:6B:96:C8:95:E7:AD:7E:1A:45
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0198D4E02B4F93166D170F66FF71D928631F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0EF8
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: v2zwTGmhmDXLOUrHXgvD8vQ/EkrROM0nNTTfiAIBfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2b:4f:93:16:6d:17:0f:66:ff:71:d9:28:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=ddf0117ef779418efbd4246b96c895e7ad7e1a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:13:8b:50:d9:49:c6:86:28:45:a1:e3:cb:
81:fb:02:59:34:4d:c2:bd:c0:85:ec:17:29:f7:5f:
dd:4c:ab:a3:83:46:70:c5:f3:8e:cc:8f:60:77:08:
32:68:3b:13:a1:a8:bb:e3:ec:6f:42:f4:69:f6:ca:
eb:72:69:2f:93:f3:9a:01:71:b9:37:79:b2:2c:54:
cc:de:c5:8f:85:be:e7:e7:f8:99:c6:c1:dc:a0:30:
f9:87:61:88:4c:57:77:d6:72:24:74:65:4a:b2:e7:
d3:24:52:e7:ce:f9:37:c7:34:40:d6:15:d1:51:fb:
e3:13:02:cd:fa:e4:49:07:b8:6f:77:a7:67:b3:77:
f5:02:56:60:97:9b:66:71:ef:d9:1e:39:8e:0d:ac:
db:ac:f1:28:4f:e0:c3:a3:86:1b:44:0c:f1:c2:b8:
73:78:e2:f2:0b:ae:b9:66:e4:43:57:f1:44:fc:bc:
d7:59:6c:f0:8a:c0:d9:88:42:5d:b1:bd:20:61:93:
6a:d9:d9:6e:99:e8:c8:bc:32:00:8a:49:84:eb:f6:
1e:57:cf:01:40:dc:cc:a1:59:04:46:4c:e6:6f:d5:
2d:b1:eb:f5:ff:f4:5b:c7:51:b4:28:f6:05:29:d5:
5a:7a:43:d4:f0:eb:d1:f3:77:e1:b6:a8:e5:51:07:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:11:7E:F7:79:41:8E:FB:D4:24:6B:96:C8:95:E7:AD:7E:1A:45
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:9e:01:bb:c3:4d:af:26:00:8d:87:c5:51:97:08:68:84:
a6:df:c6:3e:c0:3d:ee:ef:e4:91:1c:eb:fe:35:22:32:2e:64:
35:3d:34:7f:27:7d:e2:32:5a:82:14:80:d1:2a:83:01:f5:87:
da:63:d7:be:5d:4e:4c:4e:59:38:ec:56:16:b7:e2:07:0b:71:
78:40:e0:1e:c8:8d:a8:04:4b:57:c1:81:91:ed:2a:48:bc:bb:
8c:28:5b:b5:11:12:69:f5:37:7a:36:2c:4c:19:57:45:a9:88:
a6:93:13:81:8c:60:33:08:66:34:06:91:06:0e:0e:e2:ac:db:
28:a9:ea:e4:da:f1:96:04:e7:67:e3:24:08:39:7f:08:03:03:
9b:3f:ff:d6:1c:56:54:93:6a:7d:dd:af:5c:12:c4:9b:90:aa:
00:12:17:97:cf:51:c7:d9:dc:18:8c:4d:30:e6:a5:76:fe:eb:
03:32:ef:91:37:39:90:e8:8e:88:32:22:f3:de:f7:a2:6d:e9:
12:b6:6e:0b:fc:33:dd:95:0d:de:ef:69:7a:5e:2d:f1:51:71:
2f:d7:6a:ae:9d:c1:64:fd:c2:5a:ca:c7:e3:a2:32:69:30:ed:
80:aa:8b:a9:f4:0e:77:c7:4f:6d:43:69:bd:61:b7:19:5d:02:
f7:cc:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:09 2025 by rpki-client