Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: jsobrrifU39aZGWetQj/DOnpRFZYzE1sH8J0lIis4tw=
Subject key identifier: 0D:20:4B:8F:8F:D8:99:B5:DD:79:F7:04:53:20:CC:33:88:38:2D:1E
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019933143C66B2AC278B585298A5B4A1C8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 10:03:08 +0000
Manifest this update: Wed 10 Sep 2025 10:03:08 +0000
Manifest next update: Thu 11 Sep 2025 10:03:08 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: U9iTC2y7ijCCTmSBpmDvpB+4l2h3cwbEXxdcQgMEfrk=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:3c:66:b2:ac:27:8b:58:52:98:a5:b4:a1:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Sep 10 10:03:08 2025 GMT
Not After : Sep 11 10:03:08 2025 GMT
Subject: CN=0d204b8f8fd899b5dd79f7045320cc3388382d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:6e:ab:e5:a0:78:00:7e:c7:9f:e4:27:21:
79:e3:ef:a0:cb:8e:0a:57:cc:72:77:4f:4d:fe:f5:
07:63:96:9d:65:01:a8:6e:9e:4b:d4:a6:7c:16:91:
0d:86:cc:41:cf:39:5a:30:22:38:59:6b:a9:f4:e7:
39:d3:91:ed:dd:4f:c6:0a:75:37:02:69:78:23:2f:
cb:7c:ca:96:6f:0d:56:62:61:45:46:13:ed:a8:bf:
91:45:b8:fb:52:08:b9:70:65:26:51:df:2b:9c:11:
fb:f9:b4:47:4a:45:5d:73:0f:d3:ab:9f:3f:7c:50:
41:f0:3f:ae:73:38:e3:ff:8d:41:e3:73:13:b2:df:
6c:a3:c3:bc:13:40:c0:c4:8c:43:3f:d4:2a:d8:56:
b3:6f:4a:87:61:a8:a3:f7:56:cd:76:05:82:c5:2e:
d5:10:6c:71:27:58:c2:2b:5c:65:31:c6:20:2a:29:
91:c3:28:4f:4c:67:6b:08:42:49:bf:32:ae:41:09:
a6:f0:58:c0:ce:81:85:b5:8a:89:0e:5e:2e:2e:2d:
70:b4:b9:c1:22:3a:0d:12:b3:ee:39:5a:e5:7c:e8:
fa:0e:7b:ba:6c:11:57:b9:b6:71:cc:d5:ed:6f:12:
cc:81:f4:24:7c:97:b6:56:5f:66:46:01:47:47:5d:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:4B:8F:8F:D8:99:B5:DD:79:F7:04:53:20:CC:33:88:38:2D:1E
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1c:42:4d:92:09:f5:7a:0a:8b:64:de:2d:13:0c:10:2b:36:
11:0b:4c:10:66:55:ef:20:35:83:a3:33:8e:b7:b4:da:92:f8:
8e:3c:94:94:d6:e8:b1:22:87:25:00:33:72:32:0b:0e:34:53:
b9:1c:c3:a5:b6:c6:c9:83:af:a4:32:19:85:8e:f5:93:52:75:
79:c6:f3:76:89:e4:e3:78:dc:08:78:18:4e:4c:b9:5b:9a:63:
ed:fe:f9:9f:3f:37:d7:52:0c:c8:da:b2:94:bb:12:fd:6d:78:
ce:da:78:dc:27:19:7c:35:dd:72:57:a8:a5:e4:d9:80:48:54:
58:d2:ab:8e:38:a2:01:c1:34:e4:76:2c:a7:1b:e8:ae:a1:08:
b3:c6:04:f8:71:66:b3:7e:1e:f8:85:51:8b:0a:47:af:d4:c0:
8a:91:d8:57:0e:19:d7:5c:45:3a:76:e2:eb:e2:5b:c2:90:39:
7f:9c:cb:bc:18:a1:41:c9:b0:c0:80:90:d5:74:0b:8a:ec:54:
db:08:22:27:cb:9a:93:d9:aa:a1:60:0f:bf:aa:71:05:1a:1a:
ae:c3:82:0b:0e:d7:62:53:36:11:cc:b1:89:86:83:c8:07:a5:
f5:3d:38:57:d8:39:bc:57:7e:88:ee:33:72:65:ed:00:d9:58:
06:18:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:41 2025 by rpki-client