Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: /hNp3SDrF/jMB+JwnsFPSdDMwqQaPJr8R3JetX+VaqM=
Subject key identifier: 1D:7A:68:1D:1C:66:66:0E:BD:64:EC:DD:14:16:CE:C2:5E:07:BC:E8
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019857588AA483C820C27863ACB465FCCE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 18:01:17 +0000
Manifest this update: Tue 29 Jul 2025 18:01:17 +0000
Manifest next update: Wed 30 Jul 2025 18:01:17 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: zWzKrdsL5SDXFpGZyVgHFncJQSq7t03yTqw8HVaBonI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:8a:a4:83:c8:20:c2:78:63:ac:b4:65:fc:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jul 29 18:01:17 2025 GMT
Not After : Jul 30 18:01:17 2025 GMT
Subject: CN=1d7a681d1c66660ebd64ecdd1416cec25e07bce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:ca:f6:d3:0d:50:5e:42:a7:bc:25:81:d1:
e3:c7:22:ca:b9:cc:cf:b7:c6:f7:94:51:a6:f9:f5:
07:f9:1e:26:16:df:ba:49:5d:e4:20:2e:64:6d:3b:
21:ca:6f:f6:94:4d:02:e7:00:26:bf:da:08:c4:a0:
bf:56:09:87:10:0e:67:68:30:90:94:6c:57:d1:c5:
fb:e6:06:0c:a5:6b:95:40:8d:d0:90:ad:70:76:f5:
b5:49:cd:03:70:81:53:51:b5:1a:58:af:44:c2:39:
56:00:72:b1:a2:cb:bd:89:70:24:92:8a:65:24:05:
fe:dd:ce:dc:a5:da:58:15:15:70:17:3f:07:cd:5c:
0a:cd:87:38:94:d9:61:a4:f7:f2:9a:6b:02:3f:fd:
b6:6a:8e:9f:6e:42:1c:f2:5a:0f:1f:c6:2f:79:9e:
9f:9c:f3:05:6f:b6:5e:ac:5a:ce:83:a5:ef:ad:ae:
ea:6b:8c:d7:cc:8d:43:08:ef:a9:72:49:92:d8:96:
5a:8f:4e:26:6c:dd:e9:9b:50:da:f1:4c:6b:fa:be:
b8:06:9e:71:98:cc:7e:98:f0:f4:1c:13:e7:d7:aa:
9c:78:d3:b2:69:7c:3d:bf:31:b5:dd:b7:a2:c0:9d:
f4:14:b0:29:dc:ce:4e:78:89:db:b0:d1:29:f9:c1:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:68:1D:1C:66:66:0E:BD:64:EC:DD:14:16:CE:C2:5E:07:BC:E8
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:d0:16:75:01:00:d7:3b:e6:b1:17:18:c7:15:1e:92:2a:
bd:8f:d9:5b:83:03:ab:82:2a:80:81:30:89:96:02:7c:af:2e:
d5:52:49:5e:7f:5e:e6:dd:12:91:44:2b:15:dd:90:be:35:37:
7a:61:e0:81:88:f8:35:77:d8:93:55:4a:20:dd:e8:af:13:2e:
3c:a8:73:62:76:69:4b:1e:46:03:fd:6b:07:1a:5c:79:5c:4a:
dd:95:bf:89:80:5b:ad:c0:9e:9c:a3:c6:87:ed:2c:ca:84:fc:
f0:0c:0f:24:74:0f:3a:fc:0c:65:eb:ab:25:07:ab:fb:2d:99:
fb:5c:72:d3:56:ce:a7:4f:21:8d:98:4a:3d:50:c5:1f:bd:d6:
b1:75:fc:40:2a:c6:e5:88:93:a7:da:6e:2f:82:cf:d7:df:ce:
07:5e:bb:d5:cc:8f:ea:5b:20:13:6a:e7:ad:28:2f:f3:88:7c:
90:2f:ad:87:ed:48:7e:32:33:8f:00:df:87:6f:93:ad:74:b2:
53:e1:5c:42:f1:7e:31:ea:fe:9f:3c:b0:90:b0:17:92:ca:91:
7a:ff:42:97:89:10:3a:de:1a:fc:3e:f2:c6:a8:2d:01:d1:7e:
ac:07:32:eb:f8:6b:43:93:b1:f0:7d:1d:41:a4:cc:ea:64:42:
96:00:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:38:22 2025 by rpki-client