Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: qpGesOS+ybc6Ut64+6b1E71ABRL1iA+IykbWGnFw74M=
Subject key identifier: 0C:FE:F3:38:99:F5:8F:7A:14:48:0C:75:A3:66:0A:E0:42:76:59:8A
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019847769CBBF17D23C1DE2E7B7E5EED57BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1040
Signing time: Sat 26 Jul 2025 16:00:12 +0000
Manifest this update: Sat 26 Jul 2025 16:00:12 +0000
Manifest next update: Sun 27 Jul 2025 16:00:12 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: tYNoeo2oUT/34QiusV431+kWbpdBKtb61M9yAwhabws=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:9c:bb:f1:7d:23:c1:de:2e:7b:7e:5e:ed:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jul 26 16:00:12 2025 GMT
Not After : Jul 27 16:00:12 2025 GMT
Subject: CN=0cfef33899f58f7a14480c75a3660ae04276598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:33:dc:78:4e:76:f9:51:f2:ba:23:f3:9e:
7b:10:0d:cd:a8:25:f5:53:71:73:0f:bd:f7:2b:9f:
62:fb:eb:6b:84:e7:8f:4c:3a:83:9f:4c:24:43:2c:
c7:dd:44:75:4f:de:28:63:cc:82:48:71:4b:28:fb:
23:ab:78:ec:1b:79:74:ff:c3:2c:b2:6d:88:64:e7:
fc:62:d9:5f:ac:9b:61:dd:6b:74:d4:62:c2:f1:59:
05:9f:19:56:66:a0:72:41:41:d4:a3:53:70:ee:3b:
e5:c8:73:18:ea:9d:ec:b9:1c:73:8d:9a:ac:70:96:
96:27:ae:bd:df:ae:98:ec:78:4f:1c:f1:f3:de:fa:
42:c4:2b:cc:c5:f3:61:96:28:c4:b5:ca:b1:11:35:
a1:2a:38:65:de:f9:10:17:63:0f:92:06:84:30:16:
51:f6:1f:3b:c1:b9:7f:67:b1:03:7b:88:f1:c2:46:
f3:68:38:5e:88:61:e6:c9:10:7f:1a:ea:25:f1:a3:
0f:dc:7d:38:4a:6c:26:d4:43:9b:db:95:e0:0c:3f:
0d:73:3a:1f:a4:d9:1c:10:75:2f:07:58:3c:57:08:
75:e0:28:dc:6b:d9:f1:a6:52:1e:a3:f2:cd:f5:c6:
ba:9f:3f:66:ef:7c:e4:c6:f5:90:d1:25:4c:3b:c7:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:F3:38:99:F5:8F:7A:14:48:0C:75:A3:66:0A:E0:42:76:59:8A
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:6a:0c:c6:5a:d5:9a:46:aa:a6:88:78:2b:25:c5:82:01:
1e:d1:d1:e3:05:9c:bf:34:5c:b4:1a:4b:d0:27:d6:66:a4:b6:
7d:d3:56:b8:c5:9d:8f:99:49:f1:4a:20:35:27:8d:38:72:4f:
5c:9d:d7:64:8c:50:5d:28:44:dd:bf:ee:80:32:46:87:22:da:
89:23:03:c7:5f:69:a6:66:d2:0f:f0:3f:6a:60:77:56:c3:26:
e9:e1:af:c8:5b:ba:4a:06:d2:88:2e:c3:a4:8a:11:51:8c:9d:
cc:05:20:d6:d5:fb:87:f7:53:45:22:62:20:02:4a:4c:27:db:
18:ac:a5:c7:ea:48:72:63:60:9f:93:8f:5a:49:09:3a:71:d4:
99:f4:94:b3:0b:8a:a2:20:92:bd:c3:67:ce:2f:00:2e:76:17:
c0:0f:ff:82:2b:b7:e6:13:a2:c6:78:0b:2f:8f:2e:37:f2:92:
94:7b:7f:5a:45:e5:8a:46:b0:ee:9b:91:ea:21:2a:60:41:79:
87:a6:c0:4c:72:27:bc:5c:be:65:17:d0:99:17:1e:1d:c6:f3:
84:62:7c:f7:20:02:71:d3:0d:e0:9e:af:97:0f:2e:f6:2e:cc:
4c:63:e0:a7:d9:87:e3:10:92:12:f3:26:cc:a2:dd:fb:c7:ed:
a7:e6:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:03 2025 by rpki-client