Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: jS/bOCkUKUWBijBlRxuDwQgxquRUXsraZx1CGD/sKH8=
Subject key identifier: 8B:D6:9D:95:19:16:78:1E:EB:65:C6:C7:A2:A8:9D:A2:68:EC:E6:AA
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 01993191DF60AE54479B4B686CFAFF14DFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 01D8
Signing time: Wed 10 Sep 2025 03:01:07 +0000
Manifest this update: Wed 10 Sep 2025 03:01:07 +0000
Manifest next update: Thu 11 Sep 2025 03:01:07 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: wx3Z7iVJ9joTRd2cgauToXHosV53CGFYTzfOPunZT64=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:df:60:ae:54:47:9b:4b:68:6c:fa:ff:14:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Sep 10 03:01:07 2025 GMT
Not After : Sep 11 03:01:07 2025 GMT
Subject: CN=8bd69d951916781eeb65c6c7a2a89da268ece6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:ed:a5:d4:01:7c:0f:8b:6e:2a:d5:c1:ea:
99:26:93:39:34:03:e0:1f:b0:10:a2:72:1f:de:91:
0d:9a:3a:5f:21:87:fe:9a:e9:02:f4:91:4b:49:5e:
8d:9c:c0:d7:ed:31:18:81:9d:2a:9a:04:4b:f6:2a:
9d:1e:60:03:5c:05:be:12:48:59:3c:c9:49:26:c7:
f0:e5:9e:3d:33:62:ef:4c:f4:e4:c0:9b:cd:43:bb:
34:92:be:ef:13:ba:c8:58:d5:d7:ce:c3:7d:fd:a6:
15:42:50:df:51:64:4f:24:0d:b3:a4:57:32:10:24:
33:86:63:93:65:77:dd:02:64:00:cf:cd:31:f3:71:
24:5c:a6:a1:62:15:04:63:70:17:12:a1:e9:f7:da:
36:eb:33:42:d1:62:1f:0a:90:51:4f:f7:8e:c8:d4:
a2:90:62:4a:15:ee:64:a2:7d:65:62:4d:48:0a:41:
86:d7:3a:f4:f9:9c:db:e3:4e:7f:84:1a:6a:52:b6:
17:24:92:e7:bb:13:9a:bb:42:ff:89:88:d1:4c:40:
5e:62:60:dc:6c:7f:52:3d:f3:89:03:7e:70:40:a1:
03:39:1b:cc:f6:a1:22:a9:09:23:09:3a:c7:4c:04:
fb:13:98:ce:a0:5e:0c:0f:3b:bb:76:7c:e5:19:b9:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:9D:95:19:16:78:1E:EB:65:C6:C7:A2:A8:9D:A2:68:EC:E6:AA
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:22:af:81:2b:f2:4d:27:70:2e:ac:8f:97:4f:c1:9b:02:
e2:50:17:cf:76:66:f2:46:0b:d2:e7:6c:51:fa:d7:49:a3:6c:
40:c4:ac:ea:2b:b2:a4:6e:02:fa:51:96:a6:e9:1d:af:ab:a2:
06:80:d7:69:48:59:72:55:56:49:d2:dc:d5:d7:8c:0d:84:01:
fb:17:d9:5d:1e:ec:cb:42:b2:72:f3:2b:a1:77:65:d8:ab:41:
37:b1:3e:0f:3c:d3:75:d4:b6:63:ef:3a:c8:7f:8f:6a:fe:e4:
00:5a:5e:29:b0:4a:ce:65:36:c4:1b:af:48:5a:32:f9:4e:28:
8b:4d:15:51:3c:4e:f7:8d:25:a9:7a:3c:cf:45:a8:7d:01:3f:
b7:ff:23:c1:b8:e2:15:9d:d0:2e:49:f9:33:b0:4c:e8:b0:fb:
ae:fa:91:bc:82:12:30:d4:f1:3d:0b:a6:a7:38:ae:45:62:93:
72:51:cb:46:6d:7a:80:19:12:a2:65:ec:53:5f:5b:06:a5:5b:
3e:1f:f8:af:2c:b8:7d:a7:96:5f:5a:fe:1f:51:f9:0a:c0:18:
88:9f:d2:14:51:33:06:de:56:ed:76:bb:53:ae:5a:f8:2a:15:
63:4b:aa:2f:3c:19:7d:5f:57:bf:28:fb:1a:6a:af:7f:40:41:
fc:cd:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:56:18 2025 by rpki-client