Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: THl8mZeyQr9i6JfcqdORASZJJnPXs5aVzNNjBjHE7So=
Subject key identifier: 76:13:66:1A:B1:90:BD:12:2C:AB:BB:E9:2E:2B:20:5D:15:90:FF:BE
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0198D5159DD67460695EC81167FE2404B710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 038D
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: zusMJ2t6tPKsg9ASTHjkqYrm+oawBLDSfPZ9xteH7Bg=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9d:d6:74:60:69:5e:c8:11:67:fe:24:04:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=7613661ab190bd122cabbbe92e2b205d1590ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:28:ef:50:d8:6c:74:90:05:26:f3:31:33:
84:c9:a4:57:53:2a:d6:04:56:71:36:6e:c3:33:e9:
1f:bf:3c:77:e3:37:a1:05:9d:0a:51:d3:de:bf:32:
62:b2:06:4b:33:2c:83:59:84:9d:a9:d9:0f:75:e2:
c8:e0:4f:c7:ab:f4:19:1b:4a:76:aa:8e:dc:10:57:
ed:87:5a:9f:4b:33:ca:07:59:67:ef:4d:bb:d8:57:
13:f4:ca:77:88:57:86:3a:82:e8:21:f5:0e:c3:89:
36:da:0d:d5:71:99:fa:3e:0d:cf:88:b4:b6:8d:8e:
f9:b3:01:58:ce:66:b9:17:ba:27:a0:62:e9:26:74:
76:4e:6d:c7:b9:82:d8:93:de:83:db:ca:71:d0:1b:
9b:5a:c2:1b:48:1a:8c:5e:1b:39:c9:16:c2:b6:16:
fb:95:09:a5:00:63:c4:43:85:52:f8:23:c4:3a:72:
ef:04:8d:c1:a2:58:41:38:91:2b:e5:a0:c2:71:a7:
d3:73:24:81:b6:c5:b1:16:ef:25:15:19:28:b9:8d:
fa:b2:c6:b5:4e:a8:ba:36:da:36:49:4a:2e:c7:0a:
f2:e7:69:41:7a:9a:c0:86:af:62:8d:18:53:af:83:
cb:c6:42:5d:2f:aa:90:95:fd:6c:28:a1:bc:18:42:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:66:1A:B1:90:BD:12:2C:AB:BB:E9:2E:2B:20:5D:15:90:FF:BE
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:09:99:03:7a:eb:0d:8e:ce:d3:14:a1:5f:ab:80:c2:ad:
19:cf:72:56:03:02:11:ec:c0:24:98:94:f3:78:83:05:3e:77:
9e:74:d5:8d:ed:ae:a5:88:64:bd:a3:93:16:5c:1d:15:3a:c2:
06:73:71:fc:6d:8f:84:2a:37:3a:c3:85:c5:ab:64:84:8e:ba:
0a:24:f2:f3:33:75:40:49:06:2a:12:4d:c5:3f:1b:5b:e9:c7:
41:99:f8:b7:55:89:2f:7c:20:72:56:07:09:b7:7f:e3:cf:0b:
21:4a:a5:56:67:a2:85:c5:7c:26:49:7b:aa:fa:e7:b0:70:ac:
5a:84:c7:d0:b1:d2:31:72:dd:75:46:1e:23:9e:14:6a:46:bd:
2b:a6:47:ac:e1:e1:af:4d:3f:ee:d2:ae:0a:40:43:c8:ba:dd:
b4:88:aa:07:1b:ed:53:e7:8b:49:d2:bd:8e:49:5d:d4:45:b5:
6f:d3:0d:f5:2f:d2:32:81:5b:22:54:96:50:e8:91:7b:bf:77:
a6:b1:a2:d5:8b:9a:ca:46:60:ec:c4:ed:54:21:a6:b3:e8:02:
62:ed:72:17:e7:7b:f8:d1:cd:9a:9a:f8:4a:08:b7:33:79:94:
6a:e5:ee:11:92:5d:05:93:a8:2d:f5:2b:52:22:78:e4:55:28:
42:f7:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client