Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: ucB4pHaZHdhJHFRgMWwZ+WMIKWBorI/xdvGTfdkSVxM=
Subject key identifier: FC:8B:5B:75:89:7E:08:60:35:03:97:EA:44:72:3F:99:75:14:30:37
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 01984B539BD99AF87971FA6A09509D372156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 1234
Signing time: Sun 27 Jul 2025 10:00:27 +0000
Manifest this update: Sun 27 Jul 2025 10:00:27 +0000
Manifest next update: Mon 28 Jul 2025 10:00:27 +0000
Files and hashes: 1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: 8OM2bhz6WNm7whVcerITjgEnJEiy44SfQ+TjaT5Y5dk=)
2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:9b:d9:9a:f8:79:71:fa:6a:09:50:9d:37:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jul 27 10:00:27 2025 GMT
Not After : Jul 28 10:00:27 2025 GMT
Subject: CN=fc8b5b75897e0860350397ea44723f9975143037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:a8:88:94:33:df:a1:b5:51:1a:6d:bf:de:
6a:99:ee:01:b5:ae:a2:42:58:a4:9a:5a:86:88:22:
6e:b0:17:96:ad:7f:af:45:21:dd:6f:e6:1e:60:5b:
7c:71:d3:5b:5e:30:83:3c:0b:c9:f0:3e:02:b6:a2:
85:1a:01:25:8e:6c:2a:ab:ce:17:0c:da:a3:b3:b5:
e3:6c:a9:e8:a9:7c:21:06:63:4f:d3:3e:9e:74:e9:
d3:96:65:af:e7:d5:d9:c8:5f:c8:88:c5:25:2d:5b:
aa:a0:6f:8a:de:6e:8e:7a:03:c3:4f:b8:49:0b:14:
50:86:bf:44:85:8b:f3:cd:f2:eb:d0:f5:2c:57:62:
37:9e:7e:39:8d:5a:2b:bb:95:bc:00:d2:7b:eb:43:
fd:a8:64:22:c5:32:13:dc:2a:69:b8:eb:8c:00:3d:
2e:25:31:d9:8c:8a:dc:ce:56:c8:4e:cb:66:43:6e:
0a:02:ac:d6:d7:5d:4d:21:8e:b8:17:11:9f:ed:a1:
69:74:68:fa:cb:fb:2c:ee:7a:98:ef:74:0a:1b:70:
da:9d:2e:cf:96:0a:dd:ff:f6:20:29:da:18:39:9c:
19:60:d5:cc:4f:bb:1b:fe:47:4e:e7:54:cd:6c:d7:
ae:65:69:26:b7:9f:9f:d2:ac:2e:25:df:80:bf:4b:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:5B:75:89:7E:08:60:35:03:97:EA:44:72:3F:99:75:14:30:37
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:23:c8:da:fb:1b:86:5f:25:cc:21:94:05:14:f3:b4:2c:36:
16:87:8e:3c:e0:ff:7f:b4:05:1c:d3:db:ed:f6:85:e8:be:3c:
38:c7:c2:89:a6:83:8a:0b:c5:3d:4f:11:9e:44:ab:17:be:07:
4e:8e:05:65:3e:3c:3e:f8:e8:22:2f:ae:05:26:ae:2e:e8:24:
b0:4a:ae:ce:4f:4f:da:61:00:33:4d:ff:a2:f7:33:41:a5:06:
e0:01:8f:91:5e:7d:9d:37:d1:fb:7f:83:01:54:83:3d:6c:66:
b6:e8:25:9a:1c:af:0c:bf:14:57:7d:81:a1:b5:e0:06:6e:46:
0c:3e:d1:45:91:9a:42:bb:f8:df:fc:1a:21:85:f1:0a:b4:51:
5a:34:72:31:5d:e2:bf:1f:63:cb:38:32:59:16:51:fc:b2:eb:
d1:0a:8c:f6:a9:71:8b:90:e7:d3:1a:d8:8a:df:57:53:4b:b5:
68:61:dc:cc:bf:ab:12:71:91:31:eb:f4:9f:49:a3:f6:69:36:
54:25:51:8c:0b:63:99:a6:e2:5e:e4:0e:de:24:0c:07:21:24:
a8:c6:42:e7:de:a1:87:64:1e:bf:8c:c5:04:2e:2c:5c:e8:67:
a1:ac:ea:1a:f0:c3:43:d9:25:11:51:3d:d2:8c:b4:b2:47:69:
90:83:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:11 2025 by rpki-client