Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: go1G5OBQz91SV13LQs+E0a7DqclFmpYEOCArjsTzyb8=
Subject key identifier: BE:13:B8:3C:67:4C:8B:3B:99:D5:17:26:CE:68:C3:14:19:EA:39:9C
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 0199228D2873A9A615653CAA94973E22B13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 0FD8
Signing time: Sun 07 Sep 2025 05:01:40 +0000
Manifest this update: Sun 07 Sep 2025 05:01:40 +0000
Manifest next update: Mon 08 Sep 2025 05:01:40 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: NK7bg8lCfyLWWWcCc4+9/RUdjc+nbxb/RDBwr4clyV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:28:73:a9:a6:15:65:3c:aa:94:97:3e:22:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Sep 7 05:01:40 2025 GMT
Not After : Sep 8 05:01:40 2025 GMT
Subject: CN=be13b83c674c8b3b99d51726ce68c31419ea399c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:11:9f:b1:7c:87:b2:e1:60:5e:3e:63:be:
c2:78:1f:ed:28:36:db:8e:81:04:9e:48:a7:5c:73:
24:b2:70:c0:91:27:ae:84:41:27:b6:b5:38:7e:5c:
09:d6:d3:0a:34:80:92:ef:ad:1f:c2:c7:dd:bd:36:
91:75:07:0d:be:2c:42:5f:d8:fe:c7:c2:53:f2:b3:
a3:96:f2:cf:5c:ce:ff:44:38:4a:37:74:16:8f:9e:
81:a1:ee:f1:97:8e:ab:81:4a:17:b2:3a:74:5e:65:
3c:bd:ff:32:aa:e7:c0:7d:1a:d7:4d:83:00:7d:0c:
04:bf:2b:03:6a:8b:cf:39:02:be:90:bb:e5:73:af:
e6:2b:f1:62:ce:af:5b:5a:ee:a7:00:e4:0e:67:c5:
28:18:58:ab:45:48:25:64:49:ed:7b:73:cb:af:a5:
1b:73:31:ce:8e:ae:77:c7:bd:d7:cd:20:b8:9f:20:
4d:c8:ec:d8:71:86:86:79:5b:60:c2:d6:9b:a4:61:
85:b6:5b:e9:84:ae:93:cb:92:32:bd:a3:7d:a0:a2:
e0:e5:d9:73:f7:e7:fa:f0:92:df:d0:0b:81:7f:eb:
a9:01:bc:00:43:4a:9c:d5:2f:24:34:b9:ff:75:be:
a1:16:58:b9:d7:fc:f2:e6:12:35:55:8b:0c:ae:a4:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:B8:3C:67:4C:8B:3B:99:D5:17:26:CE:68:C3:14:19:EA:39:9C
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cb:2f:fd:7c:b7:f5:d9:bf:03:a4:fe:90:b8:fa:71:a4:f5:
c6:76:0c:97:26:8e:ae:1b:9c:ab:fa:15:9a:fd:99:4d:69:d6:
55:1c:c0:13:60:6a:9b:09:d3:b2:02:bf:3c:d3:b2:cf:57:5e:
31:a0:ce:bc:49:78:8a:54:1a:e1:8a:a7:c2:b2:74:40:86:55:
e0:ed:8e:13:aa:73:41:f7:67:3a:bd:0b:3b:d9:88:58:8b:97:
74:62:a4:e1:b0:4a:ed:0a:45:fa:1f:87:bd:b1:f3:0b:b0:5f:
01:5b:1a:0f:d7:0d:06:1c:cf:9c:f6:4f:a5:38:03:45:c8:2b:
59:f0:1f:9f:b9:9b:88:87:07:16:40:c1:82:c6:3d:4d:98:8b:
47:7c:a8:23:ec:0f:5e:43:4e:76:67:5f:4c:7d:68:3c:4b:0f:
1e:49:46:8a:ca:5f:2d:32:46:69:48:47:d7:67:be:07:36:ed:
18:4c:9a:31:ad:0a:10:b4:2f:17:90:eb:37:df:17:a3:af:97:
0c:f8:1b:a0:24:8e:d0:ce:5f:b1:d0:97:f1:9e:2a:c6:f0:3c:
a7:97:68:7c:c4:1e:fc:60:d3:43:c8:8b:68:21:f8:97:d1:93:
78:e6:15:f0:31:d9:55:c5:b5:bb:fe:2a:b8:02:bc:a3:2b:66:
60:6a:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:14 2025 by rpki-client