Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: 6Ew7Nxgih5XwnNZzYUghHZn0xwtfZWljxyzhKZZj4kE=
Subject key identifier: AF:E2:2A:A1:75:5E:39:5A:01:6E:0B:BC:CE:84:7D:EA:0B:FC:CB:D0
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019836165154013F364BFE1F8E206B87F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 15FC
Signing time: Wed 23 Jul 2025 07:01:28 +0000
Manifest this update: Wed 23 Jul 2025 07:01:28 +0000
Manifest next update: Thu 24 Jul 2025 07:01:28 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: NO17FDkk59dANb+defvVxGl+dk0+KH3q+EmiQgs5T7A=)
6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:51:54:01:3f:36:4b:fe:1f:8e:20:6b:87:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jul 23 07:01:28 2025 GMT
Not After : Jul 24 07:01:28 2025 GMT
Subject: CN=afe22aa1755e395a016e0bbcce847dea0bfccbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:4b:bb:ba:3b:75:f2:69:4c:63:58:9a:75:
a9:c4:71:56:de:6b:19:9c:a5:d5:8a:aa:b0:ec:13:
59:bb:f9:7a:4f:d3:6e:5d:81:64:22:43:33:11:3d:
fa:cd:ac:85:28:bc:c3:36:a3:9e:ad:e5:cf:7f:98:
02:97:b6:b2:fd:54:a0:1e:6a:b1:c9:69:dc:84:1d:
f6:ff:5e:41:14:e6:15:fd:6a:7d:28:a0:f8:9a:f7:
a1:49:4e:6d:f1:4e:8a:a9:85:37:8f:7c:11:4d:fc:
3a:11:ca:fb:98:49:76:0f:72:b3:fb:2a:8f:20:b7:
de:c9:b2:a4:9a:92:11:76:ad:f9:a9:ad:2e:0a:a3:
a9:84:41:35:fa:3c:83:ee:7a:4e:1b:5c:c4:29:d1:
40:4a:18:35:77:ba:6a:5e:35:d1:74:6f:e2:74:02:
e8:d0:8c:81:ca:96:15:81:8d:de:99:a8:c7:e2:e4:
7e:da:d3:8b:86:79:dc:66:8d:f5:60:87:3c:8d:f4:
bd:de:56:a2:a9:32:19:17:9c:d0:f1:dd:70:1d:7e:
72:cd:5b:c6:74:83:50:0f:e4:08:35:f4:c4:ab:4c:
dc:c1:15:e2:5f:14:81:8d:ac:36:1a:2d:24:45:16:
94:da:38:db:89:fc:e5:74:8b:be:b2:b8:43:f2:3c:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:2A:A1:75:5E:39:5A:01:6E:0B:BC:CE:84:7D:EA:0B:FC:CB:D0
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:20:27:e1:1d:15:d7:72:7a:32:30:ec:60:66:5b:19:a4:
44:9c:8b:67:ba:b7:f2:e9:00:71:1b:6b:09:3a:26:fb:b8:00:
83:84:a9:79:7f:45:33:37:3b:36:bd:25:95:f4:17:00:70:ed:
99:c7:de:4e:56:9f:1e:d5:bd:28:e6:85:41:bf:1d:40:c3:07:
8c:ea:2e:a7:f5:ee:c9:c4:fe:90:98:47:e8:1f:2c:80:b6:69:
4f:75:54:c9:28:8b:09:57:87:dc:83:b6:e1:3a:2d:7d:5d:03:
53:77:02:33:79:ec:d1:fa:cf:b5:60:d5:e2:87:2d:cc:2c:ba:
8e:50:d5:fc:86:e1:9d:40:bf:c4:a7:1e:a8:3d:c8:d8:a2:c6:
8e:5e:67:32:c4:bb:7e:21:ae:6a:70:d8:c3:eb:e6:d5:d3:80:
88:d6:c9:79:58:2f:63:63:35:ae:a8:2b:61:5a:ac:06:9e:59:
ea:d6:79:1b:19:77:b4:c7:26:06:fe:f2:bc:f4:04:de:d2:49:
62:2a:d2:06:36:0a:85:dd:ac:5d:c1:bf:74:64:e7:85:98:e4:
c8:b5:3a:35:58:ec:37:45:71:bb:e4:ce:cf:1e:6c:84:8d:a6:
23:6c:89:cf:88:00:bf:64:20:96:c9:42:51:f2:d4:02:52:f5:
37:f6:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:25:49 2025 by rpki-client