Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: Ba0GWXzidyUDxNyZwfXvgEZ6o1LZ7gZ5Wi0AqmfVbVU=
Subject key identifier: 11:DC:90:EB:A3:4E:D8:0B:C4:E6:3B:B0:0C:23:2E:D7:37:5C:A7:AC
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 01985155ABF096B8518DD266903996BD0CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 14:00:25 +0000
Manifest this update: Mon 28 Jul 2025 14:00:25 +0000
Manifest next update: Tue 29 Jul 2025 14:00:25 +0000
Files and hashes: 1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=)
2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=)
3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: RqHEhQH8R1a7XY702YntEwYZmehON2axkm3lxV8QeSk=)
4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=)
5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:ab:f0:96:b8:51:8d:d2:66:90:39:96:bd:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jul 28 14:00:25 2025 GMT
Not After : Jul 29 14:00:25 2025 GMT
Subject: CN=11dc90eba34ed80bc4e63bb00c232ed7375ca7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:fd:cf:b3:2e:f6:d2:9e:fb:e0:b9:e7:9b:
57:6c:b3:6d:95:7a:6e:d4:50:ef:35:d4:68:96:a4:
b7:a4:98:65:76:b7:18:30:cc:ef:27:43:98:e7:34:
50:23:cf:b7:6c:1f:55:ff:82:fd:98:f0:d8:6b:49:
8a:93:2f:7c:0c:18:96:23:a4:c0:90:6e:03:81:9b:
03:f5:2d:1e:af:06:d5:c4:40:a9:99:72:23:95:81:
8d:3f:27:13:18:5c:96:7d:1c:48:e1:31:36:8c:14:
4c:a4:24:81:a5:80:6d:0d:d5:38:f2:d4:2d:95:3b:
82:c8:f8:7e:de:e8:db:09:84:7e:35:10:2d:be:0f:
a8:d6:09:8f:de:ea:91:cb:69:87:55:2a:bc:14:73:
e8:49:26:d5:b2:93:66:ef:80:fd:66:54:eb:4f:af:
72:86:3a:fc:ba:11:21:4c:2f:3a:38:48:1a:62:88:
64:d2:15:d8:ad:30:b2:af:bd:63:62:d8:88:89:d9:
c8:d5:24:08:2a:d9:3b:4c:4a:93:f9:b5:ab:48:d0:
8d:53:57:7a:ac:3d:2c:11:ca:8c:b5:26:98:98:f0:
09:c3:79:5a:fb:9f:d1:ba:04:d2:a3:49:53:65:04:
94:78:b2:a4:ef:ba:ed:f1:78:b0:73:16:99:db:be:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:90:EB:A3:4E:D8:0B:C4:E6:3B:B0:0C:23:2E:D7:37:5C:A7:AC
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f9:6b:60:89:23:b0:a7:3d:4c:83:ff:65:c5:1c:8e:7a:5a:
1f:b8:80:11:5e:f9:e8:1f:c8:44:a3:8c:00:88:95:d0:77:5b:
13:74:6a:ae:16:40:4c:f4:e4:fa:a0:35:7a:90:7b:f3:90:e8:
80:fc:0d:23:e9:0d:26:25:ff:31:8e:9a:9e:8b:d0:d6:e6:9e:
af:5c:e1:6d:cc:8b:16:77:d5:79:16:c4:c7:da:5f:29:41:de:
17:4b:5a:c7:21:6d:3a:47:96:90:30:0d:bd:55:35:ae:39:3b:
c1:b0:23:8e:3d:d8:73:93:3a:f8:ab:eb:32:59:e3:d8:56:83:
f7:71:c4:66:49:d7:2f:64:ac:20:ff:3a:e3:0d:d1:a0:2f:e7:
b8:d7:65:15:e8:d0:17:51:3d:86:5c:b1:08:0c:dc:7b:25:bc:
f7:7c:bd:81:5b:bd:4c:12:8c:40:6b:94:e4:51:d3:84:82:8a:
d3:cb:be:36:27:fd:bb:64:36:d1:62:ee:29:26:5b:8d:fb:01:
a3:ad:54:0e:79:c5:c7:2a:54:95:8d:76:9f:0f:f3:03:33:bb:
21:3e:1d:15:9a:b0:1e:e0:11:29:77:c3:35:33:9e:b9:27:34:
85:fb:d3:da:f6:69:6c:fe:0c:bf:8f:aa:a0:dc:29:c6:ad:1d:
9e:0a:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:19:13 2025 by rpki-client