Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: 0l9L4uBxmy4Pj/fPhJQIeG4K+czy8zHyeURrLCXb1nk=
Subject key identifier: 11:66:C9:44:71:37:14:27:94:E3:A4:36:23:84:1A:EC:3A:2C:42:0C
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 019843D0EAC0829C1B1CA487CFB0EC3A98F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 048C
Signing time: Fri 25 Jul 2025 23:00:21 +0000
Manifest this update: Fri 25 Jul 2025 23:00:21 +0000
Manifest next update: Sat 26 Jul 2025 23:00:21 +0000
Files and hashes: 1: RtwNd0kIIB4fJfHreOuMYKMR7lc.roa (hash: qbEtbkjwEQIcvAZsD7fY24iBMXF9LqUeMZOAB812XzU=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: EJ+sW19PBGMyz4jnNLSmozaDSseZRo+3YtvxdSTO+C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:ea:c0:82:9c:1b:1c:a4:87:cf:b0:ec:3a:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Jul 25 23:00:21 2025 GMT
Not After : Jul 26 23:00:21 2025 GMT
Subject: CN=1166c9447137142794e3a43623841aec3a2c420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:08:92:2a:cc:73:ba:15:1d:ed:c4:6f:15:
ef:d8:de:6c:5f:3d:a7:82:86:a1:18:b3:14:ae:21:
21:5f:55:4b:31:f9:45:26:14:41:fb:12:ae:3a:c8:
88:27:ad:cd:c3:06:b5:92:cb:9f:4b:bc:82:e2:c4:
f7:55:8d:77:38:8e:10:50:77:81:c6:35:5b:18:3f:
de:db:c8:2b:e6:71:b3:45:45:ae:0f:89:a3:b2:f1:
ac:b1:63:76:53:fb:6e:c6:78:3a:92:c2:90:d8:71:
11:6f:8b:c4:18:e1:43:41:87:09:42:86:6f:21:85:
64:8c:59:b1:eb:df:f7:6d:4b:52:c7:23:dd:9f:6e:
0b:8a:af:15:63:37:5e:eb:b3:0b:07:db:d2:6a:5e:
9f:36:7f:53:82:54:04:8e:d7:07:f4:d6:c1:20:32:
05:54:df:6b:cb:f9:af:7a:41:80:49:65:7a:6b:22:
b9:3a:a5:74:50:e7:67:a2:44:10:0c:72:d0:0e:aa:
43:7d:a4:1c:23:4e:3f:4f:4f:ce:2c:cc:29:d9:76:
8b:5e:af:4c:7e:e0:54:08:c2:b5:e9:ea:f3:27:b9:
7d:87:f6:6f:14:86:d9:ed:49:81:9b:66:d6:92:9f:
a6:98:6c:5f:47:74:d2:68:49:58:d8:82:3b:d9:15:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:C9:44:71:37:14:27:94:E3:A4:36:23:84:1A:EC:3A:2C:42:0C
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:aa:eb:dd:b7:eb:cb:70:06:d4:5a:1f:0e:b7:3e:4c:38:
eb:8f:a5:3a:1b:e9:b3:01:48:4a:24:c3:b9:29:1a:3f:be:52:
4c:8a:b3:c8:4f:05:54:c6:1f:51:d0:b0:1e:71:38:9f:8a:b4:
a6:32:b7:a5:9b:26:6c:68:f1:ce:89:1f:0e:c4:c0:17:95:7a:
78:0f:87:ee:e2:3e:43:15:75:66:a3:67:84:8f:94:b0:a2:e4:
33:e7:cd:c5:9f:7d:06:7a:c9:34:6d:8d:4b:e7:bb:6c:a8:3e:
c8:56:a0:84:bc:6e:06:4e:9d:2e:f4:06:5d:45:6e:1d:48:db:
8d:ed:94:4e:f2:fa:71:a3:62:88:73:4d:19:86:23:72:9c:31:
61:15:15:a2:0e:8d:b9:2d:49:11:0b:a6:d7:97:8b:38:a2:2e:
4e:5e:55:d3:a6:04:7b:4c:04:59:f1:5f:01:20:18:e7:99:ec:
8d:ac:08:a9:fd:7c:85:68:71:ce:b3:83:a3:f4:c6:4e:aa:b2:
74:53:f1:23:f5:a3:0e:9a:34:b6:56:fa:bb:ab:4c:68:35:0f:
4d:c1:be:f8:36:16:59:e3:24:35:ba:f9:c4:d5:01:17:bd:97:
5f:25:27:d8:ae:0a:e8:ac:88:8b:2f:16:3b:b6:e4:7a:d4:b5:
df:1c:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:56 2025 by rpki-client