Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier: NLDaibOGedIefLHc8DGFsnT0SfTZC/LqJ3nGwIT6+iI=
Subject key identifier: CA:B4:09:43:95:7F:36:C6:B9:5D:D6:54:4B:86:9E:30:25:68:45:77
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial: 01984D78CAF5AEDE861C2A0379CF20B1F442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number: 1451
Signing time: Sun 27 Jul 2025 20:00:18 +0000
Manifest this update: Sun 27 Jul 2025 20:00:18 +0000
Manifest next update: Mon 28 Jul 2025 20:00:18 +0000
Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=)
2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: tUk3CF3jxFfHEDlpNyCr8nPyzHoEvXwgMXDQuNYc1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:78:ca:f5:ae:de:86:1c:2a:03:79:cf:20:b1:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
Validity
Not Before: Jul 27 20:00:18 2025 GMT
Not After : Jul 28 20:00:18 2025 GMT
Subject: CN=cab40943957f36c6b95dd6544b869e3025684577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:91:7a:65:8d:d6:be:8d:19:f3:02:56:a8:
bd:0b:f5:51:ed:4b:ad:1d:80:8c:35:4c:a4:05:32:
c3:90:22:48:57:a2:f0:b7:b3:0f:d2:cb:a4:6d:8c:
8c:09:50:d3:74:67:15:ee:6b:7b:76:aa:d4:a3:51:
92:98:32:6d:06:66:9f:ee:f7:cf:2f:28:ee:54:a5:
dc:c9:e5:a6:38:26:bb:74:9b:21:86:56:24:9a:3c:
2b:e2:5d:b5:dc:50:65:77:53:0d:81:2a:8e:2c:28:
33:8f:6b:33:fd:7b:7a:cf:38:df:a9:6e:d9:d3:85:
68:be:53:5e:0b:f0:ea:f2:1b:4a:26:b8:0e:de:7e:
63:d4:db:e1:85:fa:1d:f5:fd:c8:52:97:30:f3:7c:
28:3b:0f:ad:24:45:76:99:1e:b7:ad:d0:7c:b2:a3:
7a:02:e7:f2:56:4a:d2:34:81:a9:74:61:60:dc:63:
7c:c4:80:ab:dd:f7:f0:b8:95:92:ca:38:c9:4d:d9:
b8:57:48:64:e8:7b:c9:b7:f5:60:11:3d:1a:f3:f7:
f6:ab:17:ff:bc:f5:dd:de:44:4e:10:4b:42:83:3b:
54:3d:b6:3f:11:c4:f9:6a:c0:08:3c:9f:5e:2f:ec:
86:cf:85:6d:55:66:d0:1a:5e:0b:66:7a:97:54:b7:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:09:43:95:7F:36:C6:B9:5D:D6:54:4B:86:9E:30:25:68:45:77
X509v3 Authority Key Identifier:
keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:fc:fa:1e:32:77:15:6c:3c:9b:e8:96:e1:2e:05:f5:74:
01:11:8c:12:fb:c1:44:28:ab:16:b3:13:60:84:50:bc:c5:6d:
a1:10:62:e4:77:b1:62:9c:32:c5:53:06:c4:33:62:d2:32:c3:
fd:d0:9a:f1:46:23:98:c5:e7:d9:65:77:57:84:5a:4a:c0:e9:
30:03:17:28:e2:f1:fe:e0:44:2f:85:a0:77:35:d6:8e:e7:ec:
46:7c:8d:8d:25:16:25:5e:c6:f5:88:8b:c3:e4:eb:5e:65:8b:
ef:49:ea:db:10:25:59:df:85:8e:41:c2:ec:b7:6f:bd:0d:be:
ba:f5:b8:31:38:b8:bd:7c:d2:7d:58:43:2c:3e:1e:5e:c8:2b:
cd:d7:df:b7:da:01:a7:5e:63:09:6b:74:62:26:14:b5:9f:6b:
85:eb:5e:44:b4:38:b1:1e:f5:4b:d4:83:2b:7f:d2:3d:03:29:
e3:c1:1e:f7:d7:9b:93:db:d0:6d:0f:d4:cb:77:ab:53:cf:99:
8c:2d:b5:18:97:6c:7e:33:e1:83:c8:9d:7f:f9:f0:68:07:3b:
b5:33:0c:e7:e8:84:9c:80:de:b4:b7:8f:b7:11:07:5b:45:73:
83:b9:03:d0:da:c9:99:b3:fc:77:4f:ef:a6:0e:98:c4:14:da:
30:80:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:57:19 2025 by rpki-client