Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File: ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier: G8VZ+sfJKU8foDAZmqE4h0ZHYUGFkNPXUKBnsVLUiQs=
Subject key identifier: CA:F6:83:57:C4:53:37:CC:FD:E5:C1:E7:F2:D2:E6:3A:0E:A1:46:A5
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial: 0198D5BBC6AA5A0B2514EDA3C766CCD2BBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number: 0D00
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: eQ1QeVVT40hpx0A/ouLH6+OY/IdOje1VTg7diEBKNrU=)
2: luEbamkkQ3JNKI_McJaQ-rwJjV0.roa (hash: ErxV+CJ+EDpVd4vCMZWyy26jRiSWzXrUb4kdxbwG3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c6:aa:5a:0b:25:14:ed:a3:c7:66:cc:d2:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=caf68357c45337ccfde5c1e7f2d2e63a0ea146a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:38:b0:c2:ff:8a:e6:a3:90:c2:31:28:99:
83:c9:ef:22:00:95:f8:2f:ef:d4:a5:aa:43:46:fe:
98:5f:bb:9d:53:ef:60:d1:14:5a:53:15:0a:25:66:
79:5c:f4:2e:89:b2:42:ca:85:11:f6:32:86:99:ae:
5c:89:5c:6f:56:bd:8d:21:7c:f3:8d:99:1c:69:fc:
94:9b:aa:99:32:1d:17:4d:0d:a2:4e:ac:78:45:a3:
27:e0:e5:fa:f1:6f:4d:b7:7a:b2:3c:01:dc:f6:c4:
3c:04:82:06:c8:74:2d:69:d6:66:48:54:48:25:36:
e0:7f:ad:8b:6b:84:5d:6e:dc:30:cd:6b:b9:bd:4d:
f1:bd:80:e3:e0:a3:48:39:63:2a:d5:20:6e:57:60:
bc:0e:43:4c:30:ce:62:7b:7d:d5:73:21:60:db:97:
1e:b4:49:17:2e:1e:75:54:86:93:82:a8:4d:ee:0b:
36:0b:a9:bc:88:8e:e3:91:b5:d7:09:e1:69:af:2b:
89:7f:af:79:0b:6b:c8:0e:db:d6:3e:8e:81:4b:42:
4c:e8:da:e0:4c:4e:01:a9:7d:09:18:3f:5f:b3:22:
04:ae:48:a6:28:e2:f2:74:67:37:c7:3b:9f:b9:3d:
68:47:36:3e:93:f6:fb:35:2c:05:4b:bd:40:51:4f:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:83:57:C4:53:37:CC:FD:E5:C1:E7:F2:D2:E6:3A:0E:A1:46:A5
X509v3 Authority Key Identifier:
keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:73:dd:0d:0d:f2:54:11:fb:fb:a3:24:15:6f:0b:e4:dd:db:
c4:9f:55:9f:90:50:6f:10:82:61:a8:84:40:8e:3f:d3:04:be:
7c:a5:25:36:70:b0:5c:6a:fd:2a:8c:e4:8e:02:fc:d4:29:fa:
37:27:e0:01:7c:f6:32:25:e2:5c:f2:9e:84:17:d0:1b:07:46:
d1:16:f7:5b:90:ea:49:d1:53:32:67:67:e3:83:a5:0d:78:fb:
20:88:ee:fa:4c:f6:0e:bd:04:60:b1:b9:9c:42:88:c0:52:09:
f8:9f:81:06:3c:50:9d:dd:48:c4:8f:5b:a8:e2:6d:c1:da:59:
4e:6c:e6:21:13:d6:6f:b8:8d:ca:c6:38:ae:14:7b:79:25:37:
aa:47:2d:42:07:53:ba:9a:2d:b2:8f:b6:d5:f2:6e:8c:92:16:
8e:76:8e:5f:54:61:67:88:1d:72:2a:74:10:ba:c5:fd:01:2e:
d9:e3:8f:46:f2:b8:d1:5b:f0:33:70:3d:e5:d3:e1:a3:6f:0a:
fa:44:87:d7:26:1c:d1:fe:47:27:ed:5e:63:f2:68:3e:5a:e3:
e4:7c:30:91:5f:16:99:84:0d:d7:ab:44:64:66:2b:98:35:78:
6b:ff:93:58:26:e5:56:0c:cb:91:2e:30:6c:c9:f4:40:b4:8d:
7b:88:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:12 2025 by rpki-client