Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: A01/qQ0xD6Ard46TvAjx95MQsc7RhZCGD6t7VNq7wQM=
Subject key identifier: 04:52:19:A2:DA:B9:8E:9D:0C:AB:BA:AF:86:71:62:3A:45:BA:CF:8F
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 0198D4E073C741CD21AAD6BA7498D220D643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 148B
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: mYzmwdoi84JIb9Omb5Fla89s6mb2e+SP3v69bGl20p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:73:c7:41:cd:21:aa:d6:ba:74:98:d2:20:d6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=045219a2dab98e9d0cabbaaf8671623a45bacf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:d5:f2:a7:61:3f:04:ba:f7:d9:3a:01:10:
14:0b:09:10:ae:a0:78:1e:7b:05:0d:73:ac:a3:33:
1d:db:b5:41:b5:d1:1c:b1:74:ee:fe:97:98:5f:3b:
48:ba:4c:62:be:f0:61:ea:b9:b0:0e:c3:9c:eb:1f:
d0:27:af:26:90:c7:1c:2e:dd:fd:13:95:e1:2d:a8:
a3:ba:d9:7a:55:8d:11:6c:05:1b:e5:8a:4f:92:14:
e4:97:56:6a:1c:df:ea:e1:07:a3:f0:46:cc:50:d2:
90:57:c8:a7:24:55:a7:43:50:56:ee:28:7e:c1:d5:
61:76:59:d4:4d:c6:b5:b7:8d:80:61:f6:72:7d:30:
46:bd:f4:49:02:4d:c9:9e:76:2b:9d:45:e3:36:00:
a3:59:78:71:b1:a8:17:de:2b:c2:fd:26:45:78:57:
dd:32:6f:fc:d2:70:82:b6:e5:f6:b0:1f:d4:e4:d8:
b5:4e:c1:23:63:85:1e:00:50:d7:de:54:2f:7c:ed:
2d:18:b5:ca:6f:89:90:4d:ae:08:cf:1b:3d:3c:ae:
f9:6e:59:83:b7:8b:fe:dd:7b:3a:aa:f0:77:b4:81:
2b:f5:77:1b:1b:f4:5c:4f:3a:f2:97:56:47:fb:09:
72:6d:f9:f4:dd:fb:9a:b7:c9:56:0a:81:7a:a3:08:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:19:A2:DA:B9:8E:9D:0C:AB:BA:AF:86:71:62:3A:45:BA:CF:8F
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:00:b6:a1:ae:e9:47:38:4d:bd:cc:6c:b5:38:4d:d3:36:
1f:5e:fb:55:56:00:d6:53:14:d3:3a:2a:b2:0c:d1:dd:f5:f3:
76:34:b0:f4:d7:36:fc:39:0b:35:45:87:ec:d2:be:34:98:28:
6d:b8:e2:10:79:e1:53:b3:5c:2f:f3:5f:81:42:5a:6d:c9:e4:
b5:98:4d:fb:a9:08:1e:3e:c9:1a:6e:c2:ad:b2:e2:9d:73:ef:
c1:bd:c0:3b:a2:ea:2f:1c:36:a1:01:e7:36:33:97:6d:aa:ec:
59:ad:4a:fd:6e:25:3a:f4:86:37:7c:fe:21:9d:29:91:8d:19:
a5:97:40:11:59:b4:a7:80:7d:bf:7f:6d:ec:cc:ba:77:7c:dc:
b9:84:dc:5c:ec:85:ce:b2:6f:0e:83:67:92:ab:c7:4f:b5:b1:
d9:ed:8c:75:a1:3c:37:b2:07:8f:54:b5:1b:c3:04:37:54:4d:
41:7f:3c:5a:be:04:13:d9:28:7b:c9:8f:7a:d3:ac:22:a9:6f:
83:0b:41:69:57:2c:30:4b:1a:dd:db:df:a7:88:0f:e9:60:d5:
cd:ba:ff:c1:8f:a0:1b:50:c6:8f:d5:cf:cf:85:af:c6:00:7a:
d1:92:c3:53:ff:91:95:bd:ee:ef:ce:95:49:9f:ed:3c:38:ba:
be:89:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:36 2025 by rpki-client