Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: isjqL5HXh6g1PHIpfAHovj4VNEQ273waLvfgljcG0A0=
Subject key identifier: F2:7B:1F:46:03:73:9A:19:4D:59:93:01:33:09:E2:FE:69:F7:78:60
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0198D54E436E7D8A2031A6BEACB6BE4F9071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1253
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: 9SVVK4ItiG/7LHdWkHOX0K69kyU5nFbnTdICW/UIFdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:43:6e:7d:8a:20:31:a6:be:ac:b6:be:4f:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=f27b1f4603739a194d5993013309e2fe69f77860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:09:92:93:63:7b:7a:59:34:26:3e:8d:83:
de:52:7c:3b:22:3c:aa:87:47:20:f1:42:ef:5b:b1:
58:4a:03:40:bf:37:16:9d:bd:a1:b3:36:f4:eb:47:
b8:bb:15:08:d4:e1:5b:e8:e1:02:f7:46:59:b1:95:
eb:d2:9a:4a:7b:e7:09:f8:8d:e1:0d:ca:62:03:69:
a0:a3:f1:ad:cd:85:9b:ce:a4:7a:48:c4:0b:49:ab:
18:86:6c:2d:6e:99:76:44:34:05:fb:f4:14:3d:9b:
89:e5:f0:a8:de:34:d6:d7:4f:c8:97:e7:dc:dd:72:
15:df:27:d7:a2:0e:19:fb:a8:6f:99:5d:74:1e:87:
4f:bd:a7:58:25:e4:60:02:f8:3f:0c:c1:8e:da:d4:
1d:00:db:f0:cd:48:21:27:39:ff:c5:14:7c:20:d1:
dd:da:93:fe:ab:c0:26:68:d3:1b:02:39:61:ec:26:
b2:19:90:0c:fd:fa:e6:43:76:ef:6d:a2:5d:f0:a2:
f9:bd:ce:68:65:dd:3d:1f:54:a0:86:5c:0c:75:f3:
83:3c:5a:cf:ce:01:dd:5f:90:c6:a6:de:0f:b9:f9:
c1:52:c8:d1:dd:76:94:23:f7:7d:31:e2:fa:5c:37:
31:ec:51:07:86:1d:f6:7c:54:ce:9b:cb:04:dd:a2:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:1F:46:03:73:9A:19:4D:59:93:01:33:09:E2:FE:69:F7:78:60
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:5e:ba:d9:e8:5b:52:72:eb:fb:26:93:9d:00:7b:90:89:
4f:80:14:6e:ad:74:d8:f3:d1:49:1a:b0:d1:56:63:13:01:c2:
b6:97:8a:ab:cb:2d:1e:80:fd:46:b9:aa:54:27:18:d9:4f:83:
52:21:0b:fa:d3:02:03:d8:72:90:a7:58:b2:c1:95:2d:83:0e:
2a:54:7e:43:dc:ed:9e:e5:c9:28:51:2d:b4:de:f7:47:26:b3:
54:bf:16:cb:e3:25:1a:4c:01:3e:d0:f6:97:8b:3d:91:5e:d9:
a9:8c:7b:a2:d2:52:ed:27:45:cb:44:8d:a4:33:20:a8:58:95:
b1:cc:32:67:c8:52:29:35:37:ee:e3:8d:d2:06:78:a2:a0:1a:
29:2e:57:11:87:11:d0:af:db:42:70:3c:29:6f:61:25:be:20:
d2:31:18:18:3e:0c:fa:8d:93:f9:e0:56:ef:a7:16:6e:c5:36:
b8:a2:08:2e:93:06:49:e2:5c:a5:12:b9:e7:6b:e8:ce:fb:1c:
e8:9f:9e:50:b8:78:95:c7:8b:ef:78:ec:4d:77:20:2d:05:37:
c8:e0:a4:03:1b:68:79:57:d9:46:50:0f:96:ae:ed:8c:09:d5:
1b:25:c2:f4:cb:98:57:09:c3:e9:10:45:b8:0b:c1:d5:be:7f:
b4:b3:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:53 2025 by rpki-client