Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier: Obi7PJoYYw5dSj7EdVSsuW09jierW4A0AxTJMDDF2wA=
Subject key identifier: B5:A0:9D:E2:8A:0D:C8:A2:F4:97:46:94:2A:C8:5B:8A:68:96:5A:3C
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial: 0198D4A7F7B095014E3664823FBC9BED4359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number: 1497
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=)
2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: 01urH84qt3dQ6fa/3ffYw86pIunxNAV8HhDQU66sHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f7:b0:95:01:4e:36:64:82:3f:bc:9b:ed:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=b5a09de28a0dc8a2f49746942ac85b8a68965a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:70:26:22:d6:d2:bb:89:85:cd:95:fe:14:
ff:28:1d:55:c9:a1:b6:83:09:c3:df:d7:26:23:1c:
28:ea:14:21:c9:96:85:fe:e7:90:cc:a2:64:f2:15:
8f:a1:53:02:96:e3:c9:73:d9:38:2c:82:f3:1b:83:
91:e7:cb:ef:8a:50:71:a7:8d:6a:78:36:4d:f1:13:
0b:07:d7:9b:2d:1c:34:00:46:7d:20:96:24:b9:f3:
f3:bc:e6:5e:d6:17:52:37:99:ab:4b:d1:9b:1b:14:
02:2d:12:30:96:f3:53:14:3a:d0:ca:76:0e:cf:14:
3e:2b:45:26:44:a8:52:9c:69:e9:bb:ff:0a:9d:a6:
e9:a1:94:c9:99:b9:42:cc:8c:08:67:0a:41:3c:ee:
0f:1d:7b:97:26:6a:aa:b9:f1:7c:62:de:62:ad:b8:
93:d5:c8:dc:a4:1d:0d:d1:fa:a8:61:9c:5f:ad:75:
e6:06:6e:ab:54:83:ac:f4:6b:9b:5a:a2:49:70:05:
61:d2:44:f3:bd:14:9a:6d:0e:76:a5:41:78:dc:62:
a7:90:b2:0c:1a:51:0d:ec:2f:fc:aa:ec:1c:a7:44:
d0:46:aa:f0:52:84:96:ae:25:5e:f0:51:51:1b:27:
bc:52:f7:85:98:19:97:fd:5f:23:a5:db:b1:8b:a8:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A0:9D:E2:8A:0D:C8:A2:F4:97:46:94:2A:C8:5B:8A:68:96:5A:3C
X509v3 Authority Key Identifier:
keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ff:ba:f9:3b:ff:65:ca:69:07:cd:81:68:6b:42:ed:18:72:
80:15:a5:7d:c8:22:40:37:46:1f:41:c2:ed:1b:3a:da:6c:ac:
af:4c:54:09:05:8b:bc:54:45:d2:6e:33:5b:8a:97:93:48:39:
66:45:b0:82:33:34:38:92:59:d0:f0:58:13:d9:92:45:96:83:
97:65:de:30:26:7d:8c:40:c9:62:19:13:49:f2:bf:8b:d7:4b:
bd:3f:5d:44:a6:1b:bc:34:11:ee:6d:23:24:fb:28:c4:e6:71:
27:c5:63:04:d9:5a:7d:de:3d:5d:1d:c4:f5:c7:f1:01:e3:23:
18:0b:90:81:e6:64:8b:92:0c:90:f8:9e:56:51:ff:b4:5b:f7:
da:5b:b0:65:3b:4d:e3:cc:57:81:ed:39:1c:a4:dc:91:ac:fe:
9e:9e:27:13:4e:a3:c5:f0:a3:dc:7a:b2:23:d2:b3:ac:44:d0:
d8:28:1b:4f:fe:de:b0:42:6d:92:07:39:d0:0e:10:43:15:53:
75:92:a9:57:a0:47:d9:74:08:51:2c:09:08:ca:f6:e3:6f:91:
e9:5c:20:a0:28:ab:61:40:a7:54:ac:04:71:f7:81:19:e5:c1:
c5:cf:1f:0d:cc:cd:30:5d:c4:33:65:70:da:5c:71:8f:ec:3e:
74:57:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:51 2025 by rpki-client