Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: KfGTwsfoc9ROwOmsWMQXx4MA270A5/VwuDI8zHNe0Ko=
Subject key identifier: CD:D3:52:02:B1:D9:8C:71:B5:C4:31:1B:A2:EC:EC:06:BF:24:35:1B
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 01984965CD318E662CDFA43D0CEDBDA14288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 14C1
Signing time: Sun 27 Jul 2025 01:01:05 +0000
Manifest this update: Sun 27 Jul 2025 01:01:05 +0000
Manifest next update: Mon 28 Jul 2025 01:01:05 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: 2Y+9PMtdiadCqLISnZZRmaM6JqZWPR3183x0oJz+dsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:cd:31:8e:66:2c:df:a4:3d:0c:ed:bd:a1:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Jul 27 01:01:05 2025 GMT
Not After : Jul 28 01:01:05 2025 GMT
Subject: CN=cdd35202b1d98c71b5c4311ba2ecec06bf24351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:a3:af:d3:2d:72:73:08:bb:de:d1:2d:95:
69:4f:3a:03:f4:fc:8b:d3:0f:da:74:62:fc:3e:4c:
03:d1:d3:5f:f1:27:65:65:80:72:bf:62:78:c7:05:
43:91:77:7b:03:48:ee:e9:0c:ed:c5:f5:82:22:36:
84:97:f0:56:80:3b:5b:16:4f:1c:89:35:7c:a0:54:
58:96:79:e5:49:f2:f2:bd:0b:57:a3:a9:b4:cf:4d:
ee:3e:03:33:3a:91:c8:62:39:09:7b:39:e3:f3:2b:
b0:4f:94:2a:eb:ac:76:42:25:f1:fc:8d:70:f0:a4:
17:b0:11:5a:b9:2e:8b:38:23:63:ce:5c:0f:4f:d8:
fd:d2:d6:d9:89:1a:00:af:74:e6:a8:59:6a:8a:5c:
a4:5d:68:7d:c1:e8:ae:e8:ba:96:80:c6:77:78:2e:
d1:9a:32:68:5e:44:6a:4b:29:72:d2:cf:06:12:ee:
ac:52:58:30:e5:9d:3b:99:fb:0a:6d:99:af:32:3d:
55:aa:b7:13:52:c6:ae:5d:82:0e:9e:87:93:6b:16:
15:19:29:56:ce:15:6c:0d:ee:d2:b3:05:12:dc:59:
b4:ce:9a:de:a4:94:0a:69:6b:b4:62:dc:ae:0b:16:
a4:51:a1:fc:e8:b6:61:ef:cc:e1:66:64:76:ec:ff:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:52:02:B1:D9:8C:71:B5:C4:31:1B:A2:EC:EC:06:BF:24:35:1B
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:da:65:07:3c:1b:66:f1:b6:1c:31:3e:2f:d8:9f:12:1f:30:
f0:1e:a6:76:13:88:22:1a:18:03:eb:e1:0b:37:b5:d4:b1:58:
3c:98:43:09:63:7f:b9:5e:9c:e1:a5:2f:e0:6b:41:f0:10:20:
fc:61:ea:ca:8f:4d:44:35:dc:3f:67:0b:c3:5f:cb:2f:ba:25:
2f:ff:56:1b:ed:0c:92:4f:4f:66:e0:91:89:af:d1:b6:11:05:
b2:94:a2:92:fb:0d:95:04:69:cb:07:32:47:bd:39:c5:5a:b5:
a1:e1:d3:80:6f:00:d8:19:1a:74:1d:23:68:7d:c6:f6:11:80:
b6:9b:7a:43:9f:74:d7:9f:fa:21:51:56:4b:f3:45:1d:da:7c:
50:ac:cd:66:97:d6:8d:af:41:d5:c8:cf:28:30:5c:38:30:4e:
a3:90:4f:62:d8:6c:8c:08:0f:eb:10:9a:f4:23:cf:de:13:7e:
07:20:44:6d:41:0f:82:cf:8a:ba:4e:e9:ac:e6:62:42:f4:48:
1e:f1:6b:65:d9:56:88:13:a9:10:a6:b8:c7:22:4e:6b:72:70:
ee:46:1b:4c:f9:99:23:33:7b:ae:46:79:b2:1c:e3:57:39:c6:
f3:54:8b:ad:85:0b:6d:8e:82:ea:ad:95:db:a2:a3:5b:f6:02:
75:f4:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:44 2025 by rpki-client