Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: lngAiEGKzzKNlBsEtexaFNcOffb5V4cGe4MkapmjpYM=
Subject key identifier: C6:45:41:25:B5:BA:5D:52:C6:88:58:DE:3A:5D:6C:5B:E0:AF:77:E2
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 0198481B5AA770E8FF6ECB23CBE39DCA06BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0ABA
Signing time: Sat 26 Jul 2025 19:00:08 +0000
Manifest this update: Sat 26 Jul 2025 19:00:08 +0000
Manifest next update: Sun 27 Jul 2025 19:00:08 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: rK0QF1Q6nyIDylEZA+vwSiLIuVIlD/LOEiyDfdaV0C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:5a:a7:70:e8:ff:6e:cb:23:cb:e3:9d:ca:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jul 26 19:00:08 2025 GMT
Not After : Jul 27 19:00:08 2025 GMT
Subject: CN=c6454125b5ba5d52c68858de3a5d6c5be0af77e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:23:e1:d4:ca:34:6b:ea:90:b1:74:8d:60:
a1:30:97:7f:68:57:ce:69:b9:3d:a8:aa:1b:30:9e:
40:c7:a1:e1:e4:00:29:c6:14:d0:27:55:a8:88:c7:
90:da:34:0e:2f:c5:47:6c:d9:bd:36:f7:19:5d:f8:
9d:57:a9:20:5d:0a:56:d0:c1:6c:a5:1b:fb:1e:cb:
f9:7b:0e:cc:cd:1a:37:86:2a:d6:68:fe:06:d0:20:
b8:61:6e:b1:86:21:11:f1:cd:15:81:66:90:50:ec:
31:6c:15:eb:c7:f3:57:6e:a4:e5:b0:bb:32:9a:8c:
24:06:76:13:84:50:c6:d5:a5:68:d8:85:75:bd:e3:
a5:98:b6:07:fc:12:98:61:f6:4e:af:22:81:46:3a:
af:5a:2c:22:b7:9e:92:3c:d9:76:80:f3:e0:3f:74:
84:eb:c2:ad:b2:45:25:5c:86:b7:96:5d:f6:1f:87:
c6:a0:a9:b5:f5:9c:01:33:35:07:1a:6e:3c:31:6c:
2f:9f:64:1d:c8:07:83:2b:0a:05:23:5c:58:09:d8:
44:3f:7e:18:0d:37:f3:3e:96:c2:26:8d:aa:b6:fa:
07:f6:f5:5d:9d:2a:aa:48:dd:3e:1f:49:de:56:0c:
22:67:08:50:a0:33:48:70:bf:3f:ee:79:7d:3c:42:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:41:25:B5:BA:5D:52:C6:88:58:DE:3A:5D:6C:5B:E0:AF:77:E2
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:9e:1d:88:16:ba:f6:0e:10:c2:44:98:41:cb:a3:6e:39:
e9:42:eb:49:48:5c:fd:8d:27:3e:e2:9b:52:9e:ce:04:e0:50:
44:7b:d9:20:23:c0:79:8d:bf:4f:14:56:86:fa:1f:39:85:f8:
e4:31:76:e0:d4:a0:60:37:00:33:44:84:2c:97:a0:fa:f6:28:
b7:df:89:14:88:60:e1:43:96:f9:41:43:d7:13:1c:cf:c5:a6:
6b:f2:bc:a1:9f:92:eb:c4:73:84:10:1b:75:d9:c3:9a:7f:e1:
d0:d4:e1:ba:2c:88:f6:92:4e:7e:9e:5f:8f:2a:b1:3d:ed:8a:
0e:0e:84:75:1e:70:cf:92:03:92:37:9a:43:46:55:8f:24:bd:
27:89:35:9b:f3:95:00:52:fc:5d:27:9f:fa:e2:8b:4a:52:c2:
9b:8f:d5:d2:39:25:4c:ac:dc:6a:09:e5:e2:88:5f:b1:eb:b7:
a7:25:7d:23:19:11:ef:40:0d:51:da:d1:a0:ba:fa:ad:4a:62:
2b:d7:33:43:ed:94:5d:95:5c:21:66:5b:63:19:a4:c7:21:aa:
09:4d:c4:9d:b5:6f:91:19:af:47:e2:fe:16:72:bf:08:7c:bc:
44:28:06:a3:bf:0a:e0:3b:7f:1d:64:bc:d1:f3:49:90:40:ab:
16:5c:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:05:10 2025 by rpki-client