Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: a8YrOUoP4TkF+/fmkkObi0n3zj0ZW88HQyH+DfOvabQ=
Subject key identifier: 8D:82:49:9D:35:B7:F3:6A:2E:B6:A2:F7:89:FA:30:3B:B5:63:68:A3
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0199FFC745590CD5423D0180CB45C6C4E5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0428
Signing time: Mon 20 Oct 2025 04:01:13 +0000
Manifest this update: Mon 20 Oct 2025 04:01:13 +0000
Manifest next update: Tue 21 Oct 2025 04:01:13 +0000
Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: lYMDm5WU+rbBwNEMtDV3Ej0tM73+mRxJyVjXpZapByM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:45:59:0c:d5:42:3d:01:80:cb:45:c6:c4:e5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Oct 20 04:01:13 2025 GMT
Not After : Oct 21 04:01:13 2025 GMT
Subject: CN=8d82499d35b7f36a2eb6a2f789fa303bb56368a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:f3:a5:db:08:cd:f3:ad:cc:17:93:0f:fc:
0a:51:a6:2e:13:d3:c0:7a:95:70:e4:ae:b2:86:1a:
d2:b6:3e:fb:c8:cf:8b:a3:ca:5c:93:63:44:e2:bf:
a6:04:2e:f3:09:02:36:99:ff:ca:f3:fe:8d:bc:58:
08:e4:53:f7:2f:39:6c:85:88:e3:f2:74:6d:a6:22:
ee:02:c7:a5:80:4d:05:11:16:10:b3:f6:a2:7e:39:
34:90:33:9a:1b:c0:74:95:f9:29:4e:7c:a4:f3:3a:
64:e1:8f:01:2f:f8:44:3c:d0:43:ec:58:cb:8a:d9:
7f:cd:87:4d:42:e1:32:1c:52:dd:2b:26:6f:7d:27:
ac:75:db:78:ae:66:f4:ae:1a:df:09:36:aa:ca:85:
2d:7d:77:e6:47:26:77:b8:07:0e:b2:2b:6e:da:a5:
e6:ff:29:7c:d8:36:06:8c:8e:40:1e:bb:0e:65:0f:
07:ec:19:95:07:47:d3:42:24:3f:0a:66:58:ad:86:
9a:84:8c:d0:ad:16:2c:38:a1:34:5f:db:32:4d:12:
80:4b:3b:bf:a9:f6:37:71:bb:00:5f:a2:ff:b1:76:
8d:42:0c:ac:59:92:24:76:27:30:4c:fe:78:36:dd:
5b:2f:02:02:79:3e:86:72:52:b2:95:f2:57:dd:a4:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:82:49:9D:35:B7:F3:6A:2E:B6:A2:F7:89:FA:30:3B:B5:63:68:A3
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:70:3c:cd:a5:38:57:2d:18:71:2f:20:f7:c3:ab:1e:55:21:
94:97:98:ca:e9:7d:bc:8f:0d:2e:39:81:3d:f9:cc:d5:1a:c2:
db:30:08:fd:ab:51:12:64:64:bb:89:8a:08:4f:dd:e7:8b:bf:
8e:4f:56:8d:01:ed:b1:9b:67:0d:89:13:95:72:67:1b:b7:da:
62:9c:62:66:59:77:5f:da:ba:90:d5:16:52:88:04:a4:35:4e:
03:03:8d:9b:0d:68:2a:08:2a:d1:90:7c:2d:92:f5:42:10:d9:
51:12:4a:c3:b1:fe:1b:37:8e:36:c4:e0:83:fe:75:17:f7:d3:
19:d8:8a:cb:a3:64:c8:63:09:07:b5:1d:39:2c:aa:1f:18:a4:
5d:d9:08:c0:47:35:a0:3d:fc:d3:18:dd:1e:30:c2:c2:f1:c9:
9b:7a:eb:4b:47:48:b7:8f:fe:b9:e2:ff:d8:e8:cc:b4:6f:b4:
35:dd:e4:0e:c4:06:21:c2:03:dd:c7:e9:d1:e7:f9:32:c8:b5:
a8:25:35:bd:18:a6:5b:eb:3f:9b:46:42:b5:14:06:83:84:45:
a2:ad:69:54:15:6c:47:61:cf:dc:db:5c:44:16:72:4c:06:64:
5a:ba:50:5b:51:02:5c:1a:78:c2:db:06:c7:42:79:07:72:b1:
61:a5:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:31 2025 by rpki-client