Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: zKS8tdf6aXUGwKe45lN8gXAvXE91KAJ3s6pCZoVWAnc=
Subject key identifier: AA:B7:05:04:E1:ED:E7:76:42:59:E6:62:B3:FA:43:36:2A:00:17:39
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 01984A09ECF9F30B9ABA99CB1949356B0457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0345
Signing time: Sun 27 Jul 2025 04:00:21 +0000
Manifest this update: Sun 27 Jul 2025 04:00:21 +0000
Manifest next update: Mon 28 Jul 2025 04:00:21 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: +i5wxAuUQqEcrLvDxgB4LSkhpGHvMlnF/Kg3Y4oE+hU=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ec:f9:f3:0b:9a:ba:99:cb:19:49:35:6b:04:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Jul 27 04:00:21 2025 GMT
Not After : Jul 28 04:00:21 2025 GMT
Subject: CN=aab70504e1ede7764259e662b3fa43362a001739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:9f:85:eb:84:6c:84:ac:05:43:fc:3a:8e:
2d:50:ea:d6:f2:9e:42:6d:f3:6b:b8:21:e4:3a:42:
06:87:40:d0:f9:58:28:12:d7:49:33:5d:8e:f0:d9:
9d:5a:46:4b:78:6d:2f:84:a8:49:f1:d1:16:f7:18:
4c:9d:18:5b:66:69:aa:31:dc:62:1a:8c:84:23:40:
b7:96:9d:77:05:e5:45:f5:81:57:65:bc:8a:ad:3e:
8a:34:94:4f:c1:ea:4e:f8:a9:4b:58:06:1a:69:47:
4c:fd:59:7c:c4:32:db:33:f1:d7:17:df:44:8f:ef:
81:9f:9d:8d:31:2a:f9:60:16:ec:58:1f:1e:7c:a6:
f1:35:aa:3b:62:e9:20:52:32:80:77:e1:c4:09:b0:
c0:7f:2c:64:43:b7:ac:6a:67:a3:b7:82:e1:a9:8c:
06:e6:9f:6b:79:74:5a:c4:ba:a8:f1:07:0b:52:ed:
c6:1f:32:40:ca:94:6e:54:6a:3b:53:30:b9:49:0a:
35:78:d4:87:ec:7a:fb:0c:be:1d:01:7c:72:ef:71:
46:ba:f1:72:92:58:a7:31:85:46:e0:bc:e2:ac:9a:
3a:1a:e9:4c:6c:8f:7d:64:a1:23:80:fa:c6:1e:a8:
35:63:e6:c0:d2:68:b9:9e:9f:f9:73:fb:7c:21:44:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:05:04:E1:ED:E7:76:42:59:E6:62:B3:FA:43:36:2A:00:17:39
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:f1:92:78:6b:4c:6e:d3:e1:d8:2d:27:80:2d:36:6b:3c:
aa:86:8c:8b:77:e0:5e:fe:d5:2b:45:41:83:db:4a:0f:b5:d0:
35:61:e5:4d:96:aa:9d:9c:e7:d5:77:38:91:ce:c7:1f:34:74:
fb:39:65:1c:ce:17:53:7d:a8:87:16:91:cb:ea:f1:84:f0:9c:
04:b4:22:e7:ba:29:76:ce:73:76:c5:62:35:ac:b3:f5:96:df:
b8:b3:a4:d1:b6:34:7d:f7:f8:48:29:7a:b3:24:ce:57:a0:d8:
6e:8f:84:64:5f:e7:45:9b:e4:ee:39:11:39:03:39:3f:05:ef:
01:c3:19:87:d5:c8:c2:85:9a:62:03:be:d0:6f:8d:28:51:78:
4e:a9:df:ea:1c:12:c7:77:59:90:de:7e:94:a3:e0:42:02:ad:
72:be:45:e5:7f:30:db:ef:c0:f3:17:de:ed:53:51:56:25:35:
66:61:34:93:15:c7:21:70:3c:61:56:39:bd:3d:23:76:5f:06:
8e:aa:a0:53:05:03:6b:9d:0e:d0:43:1b:67:2d:a1:a0:49:43:
2c:7d:6f:00:1e:b0:c1:34:29:97:b4:63:ce:c6:45:1f:1d:86:
66:49:8d:20:d3:2f:92:44:10:c5:c4:6a:55:6e:8c:78:f9:e6:
a8:e1:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:36 2025 by rpki-client