Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: iFIeqVM0pLz0kJL8oUs/YJ/YNxW0jh95uiMwOc9VuwY=
Subject key identifier: CB:50:32:AF:D7:77:81:F5:FD:3F:62:8A:9E:DF:77:8E:7F:61:43:1A
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 01984A09C884823A945E1F7F98548F5A0099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 12C1
Signing time: Sun 27 Jul 2025 04:00:11 +0000
Manifest this update: Sun 27 Jul 2025 04:00:11 +0000
Manifest next update: Mon 28 Jul 2025 04:00:11 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: TGO6zAFiFX5LlZ92HmQpgQGMXZFoAg3VawjbZUQruR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c8:84:82:3a:94:5e:1f:7f:98:54:8f:5a:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Jul 27 04:00:11 2025 GMT
Not After : Jul 28 04:00:11 2025 GMT
Subject: CN=cb5032afd77781f5fd3f628a9edf778e7f61431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:b5:83:88:57:6f:d0:13:68:ef:af:81:91:
0c:2d:48:5a:58:4f:12:d0:a9:6d:16:cd:68:58:88:
54:fc:a4:9c:92:a2:fd:71:9a:36:85:dc:46:bf:31:
de:53:27:90:1d:60:4b:de:31:a4:8f:80:95:02:82:
39:91:46:66:70:c4:fd:7c:cc:f4:43:c6:2d:e7:3a:
73:2f:c3:9e:7e:97:85:ab:e6:4f:69:e1:e0:3a:89:
36:92:2d:56:ff:47:3d:9b:73:6c:7c:fe:6a:ef:f7:
a0:f1:23:4f:9f:b2:40:0a:73:fe:9b:fc:ab:2b:2f:
31:97:e3:b2:08:ac:75:90:38:45:bf:2c:d7:6d:46:
c6:07:8e:fc:40:e1:6f:27:44:a2:49:9c:d4:e8:d5:
3d:7a:3a:4b:ef:3a:1b:9f:ec:d4:47:c0:06:17:30:
5d:33:14:db:0e:91:6f:fc:7e:91:8a:91:aa:2e:90:
14:67:68:45:45:34:b8:c6:b3:6e:5b:5c:2a:af:c6:
0f:40:7b:9a:8f:c2:ee:61:ad:9e:22:43:c8:e7:ec:
1b:e5:fc:e5:55:f5:3d:8c:43:29:04:6c:2d:41:fc:
5a:30:e5:a8:11:30:b0:49:00:a4:c1:9b:de:e7:76:
39:a1:68:72:c8:f9:62:d0:11:62:06:64:cc:6c:47:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:50:32:AF:D7:77:81:F5:FD:3F:62:8A:9E:DF:77:8E:7F:61:43:1A
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:27:ef:96:ab:07:86:28:f9:e5:6b:20:31:b7:a7:e1:13:
b1:1c:d9:22:78:8d:0e:50:6f:1a:e7:e1:9c:1e:a7:f0:2f:92:
a8:42:6e:6b:cb:b8:34:6d:59:9f:a8:f5:73:7f:81:b8:eb:a5:
ba:6c:55:77:cc:b2:da:ce:94:7c:ba:b3:bb:61:bc:36:33:42:
b5:fb:e8:6b:6a:58:e3:a6:83:32:1f:0f:b5:c4:0b:c9:7a:13:
c0:1e:34:12:6d:3d:fc:4e:b4:1e:27:66:dd:a0:32:d2:70:97:
73:07:3c:cd:2e:8e:14:df:3c:21:8e:9e:87:08:6e:1f:f9:40:
c3:5a:29:a4:4a:d9:96:78:bc:d3:c9:e5:6f:40:94:dc:ba:9a:
c5:18:63:39:c4:10:d0:92:4e:bb:6b:66:c6:45:ec:d8:49:db:
0d:07:8e:3a:4f:12:98:98:33:60:07:c5:fe:c0:6b:d6:fa:a7:
02:67:94:cc:13:99:d5:dc:c1:bb:e9:84:7b:6c:08:6b:cb:72:
af:2e:11:f6:94:a7:c5:fa:b3:e5:3d:19:e7:68:41:55:27:21:
cf:09:6a:0d:b0:b2:dc:e7:5e:22:cb:72:74:70:0a:da:b8:2b:
d2:73:d4:b7:69:2b:f9:63:09:6f:78:a6:d6:58:af:b4:64:6c:
37:5a:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:54 2025 by rpki-client