Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: 01QS3wkYeB4vgC6Ddj3AK/m0imwHVUlAfc0FBqu6lqo=
Subject key identifier: 24:EB:31:1F:2E:0E:26:D7:50:DB:49:A9:46:DA:F5:2C:CF:EB:0F:47
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 0198D54E12BB908A4FD1DE97A4A434E92CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 046B
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: w8ZYPSKChDzg/X8aiQRg/E33Y5icc/DTOaGWNbmjZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:12:bb:90:8a:4f:d1:de:97:a4:a4:34:e9:2c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=24eb311f2e0e26d750db49a946daf52ccfeb0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:c6:5f:3d:93:3a:2a:cf:88:fd:47:20:c8:
21:35:ca:11:fb:42:6f:a4:68:b0:cd:49:f0:0d:04:
e3:64:5d:da:6a:37:15:ae:55:85:77:44:85:b5:d9:
6e:06:10:2e:10:db:80:38:f2:b0:9e:af:b3:b2:62:
1c:19:bb:b0:df:4d:43:bb:3f:b2:8a:8e:f5:fd:0f:
2d:8d:a8:8d:29:eb:b1:46:26:ee:81:f7:6a:93:5f:
20:4d:f1:77:24:41:78:36:8b:3b:42:f1:4e:4c:3f:
f5:86:95:03:b5:7c:ea:44:87:a2:da:22:bd:b2:19:
bc:c8:48:23:1f:25:58:64:81:d4:51:75:2c:78:f5:
a1:a8:2a:21:62:ad:c9:c7:fe:8e:59:07:92:2d:f9:
f8:98:a3:c5:49:a6:c8:d4:20:e4:3b:76:5a:e4:f8:
0f:b3:9c:9c:13:61:9e:b5:dc:45:78:d5:42:63:af:
98:79:44:71:25:d3:fe:21:ca:ac:88:5f:62:d9:83:
3a:9d:6c:9b:ff:84:93:5c:10:ba:31:59:80:22:a0:
cf:9c:ba:d4:27:4d:5b:06:1f:67:f9:4f:3a:c9:db:
b4:e7:bf:a3:8c:2f:c1:f2:f4:75:e2:a9:12:ea:e5:
d5:53:cf:c9:ff:e5:d2:4e:8c:e0:8d:9a:2b:ce:7d:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:31:1F:2E:0E:26:D7:50:DB:49:A9:46:DA:F5:2C:CF:EB:0F:47
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a1:8a:be:f4:37:a2:ea:7b:33:1d:8e:db:a1:7e:ca:ff:37:
86:cd:12:e3:86:a7:c4:8a:f7:e1:92:77:9d:a9:e4:88:4d:35:
53:d2:b2:0d:fd:8a:fc:4c:e8:ed:ba:ed:bf:26:c4:f2:ad:8e:
15:ac:25:bd:7a:f9:60:4e:aa:7a:59:19:01:e4:5a:b0:c7:3d:
3a:18:d3:0f:fb:b4:b3:22:5b:e5:ba:9e:0a:13:a2:c8:58:c7:
f5:5a:99:4e:31:32:c0:ab:69:07:bc:d2:1c:51:24:6f:90:5f:
4d:ff:19:10:35:76:69:0c:50:40:de:e9:77:6f:6b:ff:e8:70:
a3:ec:ef:ed:8c:aa:06:da:05:d0:c5:5d:53:8a:5d:d3:21:07:
4f:64:4c:48:d1:cf:d7:2d:35:57:e6:9e:f5:6d:7b:df:34:ae:
45:5c:2a:4c:f7:3a:4a:ae:db:82:e5:49:e6:81:be:5e:a0:a7:
bc:90:7f:b7:f6:09:e3:cc:8e:68:20:31:66:d2:7e:8c:c4:66:
ac:18:3f:6b:46:e3:2f:83:34:d0:93:8a:2f:10:24:0f:11:aa:
15:48:52:a4:5b:20:49:d1:46:51:1d:10:af:bc:91:05:d3:3c:
39:fe:f4:1f:19:68:bf:4d:63:73:a6:e7:aa:99:82:1f:d3:16:
c2:bd:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:25 2025 by rpki-client