Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: HZMeB3xBala8eYHLW5n6dkrNOb3lXxnA/wAaUYSnq3M=
Subject key identifier: CE:39:C0:57:75:7C:2C:EE:76:AB:6F:C3:23:24:1E:F0:0E:02:A3:28
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 01992F6CA2B72A2C518A3A5028BA25E39921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 028E
Signing time: Tue 09 Sep 2025 17:01:12 +0000
Manifest this update: Tue 09 Sep 2025 17:01:12 +0000
Manifest next update: Wed 10 Sep 2025 17:01:12 +0000
Files and hashes: 1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: M2tIPuYHJkY8XCPQxplEzEL7fuvH8kr6cYUPRKUWilY=)
3: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
4: sQVxZ_lbDcaGAO6GQ4Uax3TrnbA.roa (hash: NBxjFtKEwZR8bN/MCO3rMHIc0Pkb+5FRotafl/NdAVw=)
5: ySpicQatPy5iHCLP1veD0rDhvRU.roa (hash: y3lstPEKv9L5HhDFlk02HVUCo0C3eJ06Z+uYgaJZhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:a2:b7:2a:2c:51:8a:3a:50:28:ba:25:e3:99:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Sep 9 17:01:12 2025 GMT
Not After : Sep 10 17:01:12 2025 GMT
Subject: CN=ce39c057757c2cee76ab6fc323241ef00e02a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:d6:5d:f9:3b:01:e8:ec:d8:a8:a4:fa:97:
91:89:48:bf:4b:15:91:de:09:2a:ef:d4:ea:ee:d9:
e6:ab:99:4b:d6:00:22:23:d0:7d:22:29:a0:29:21:
fc:31:f7:d7:b4:f1:95:c0:57:47:81:0d:59:b5:2d:
41:25:38:98:ec:ee:2d:e3:f6:41:f3:d0:43:bf:e3:
be:79:89:1b:07:e1:a8:69:10:52:27:e1:43:c1:a4:
e6:86:96:6f:73:d1:95:2d:19:3a:a6:0e:b3:e4:0a:
3f:79:38:7d:8d:58:71:5c:55:47:57:97:51:49:b6:
39:1f:d3:e4:32:18:c0:55:69:0c:9f:e0:82:0b:81:
ad:1e:a6:bb:9b:38:3c:e1:95:6c:d4:1a:b5:5c:3b:
24:a3:6a:76:26:9c:21:fd:f1:dd:4c:8f:51:74:84:
8d:62:c4:dc:18:ba:f1:b5:41:97:39:cf:6c:6e:e9:
e2:5e:11:d5:b1:40:be:ec:f5:da:de:2b:bd:cb:03:
22:e3:da:c9:42:b7:30:89:6d:79:12:7d:23:6e:88:
38:55:31:63:9f:78:a3:4e:6f:c2:c7:bc:fc:59:b9:
e9:01:b3:08:0d:e8:f5:93:ac:dc:b2:6a:05:02:bc:
08:04:6d:3f:07:d3:80:42:b3:b6:5f:03:2c:7f:23:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:C0:57:75:7C:2C:EE:76:AB:6F:C3:23:24:1E:F0:0E:02:A3:28
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:db:74:df:46:dd:0c:2e:7e:0c:01:cf:b6:13:01:82:04:
b0:04:fa:38:fb:8c:80:fe:2c:db:cc:ab:f8:35:fc:ba:ab:57:
7d:7d:6f:23:92:b1:af:5f:e3:3d:16:9f:e9:ca:99:44:ea:1e:
70:06:14:cc:b9:a5:41:56:35:50:0c:8e:12:60:20:0f:ed:1c:
6a:d6:e5:21:30:7b:f9:9c:89:28:d3:c9:c9:76:73:f8:76:d6:
28:b6:cb:c2:56:0d:a7:54:4d:36:31:56:c0:47:be:f6:86:10:
51:d4:75:a2:99:6d:83:b0:b2:ae:17:c6:f3:f6:a3:c6:a4:08:
0b:57:2d:c6:53:42:bb:50:16:e4:70:78:14:aa:cc:6c:30:f1:
0c:a6:b1:5c:b8:7a:8e:e3:d5:3b:4b:1c:84:52:7e:9b:6f:9d:
ed:81:45:bc:b6:09:8b:19:20:3d:5f:99:87:b3:a4:31:98:57:
f4:6e:b1:17:b2:f9:8b:9d:8b:fd:23:fc:9c:8f:27:47:56:1d:
bf:c3:aa:15:5e:ea:a2:05:ac:09:cc:cc:50:bc:12:51:c8:b3:
a2:a3:96:1e:96:dd:38:b0:64:43:d4:fb:b7:c2:3c:a3:a3:73:
59:a7:bb:09:1f:c6:ac:fc:42:b8:35:a5:83:10:d5:41:c9:b4:
b4:f9:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:27:39 2025 by rpki-client