Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: 4tqPB2zFPyPyDe2MIMr9pdzvNH8h1CBFf2LeSnHxiKQ=
Subject key identifier: D6:02:1B:12:9B:03:B6:F1:CC:3E:42:53:DD:19:29:3E:45:04:63:56
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 01993124BE84AF6423CC2C80CF999232EF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 8C
Signing time: Wed 10 Sep 2025 01:01:55 +0000
Manifest this update: Wed 10 Sep 2025 01:01:55 +0000
Manifest next update: Thu 11 Sep 2025 01:01:55 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: ZTsyxJ3uWztLuXYLtcg9MjfmGQXmCqAxq2UvbDbvWpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:be:84:af:64:23:cc:2c:80:cf:99:92:32:ef:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Sep 10 01:01:55 2025 GMT
Not After : Sep 11 01:01:55 2025 GMT
Subject: CN=d6021b129b03b6f1cc3e4253dd19293e45046356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:6e:d5:88:fe:2a:3f:a0:ca:0a:26:bf:58:
27:c3:80:be:78:05:b3:dd:2a:c2:c3:66:11:d2:09:
8c:ed:2c:3f:91:70:7a:ca:d2:a0:f7:2d:f0:93:28:
b2:fe:e5:a1:19:2e:87:e3:ac:9d:cb:f3:a0:d5:24:
79:33:8e:ef:83:e1:72:4d:39:6d:25:ce:d1:7b:07:
76:6e:a8:a1:4d:dd:6d:87:7e:0a:b3:01:fb:f1:ac:
9c:a8:64:41:47:e7:b8:e8:93:e7:ac:a9:0d:96:ea:
6d:9a:42:cb:31:da:fd:45:76:d4:1f:68:bc:65:46:
c2:90:cf:7f:52:7c:2f:57:a2:bc:cc:7a:4e:c4:22:
5c:63:52:f6:a4:b1:d1:4b:a0:d8:a7:03:80:b8:f9:
b1:09:71:2b:f6:79:71:46:49:7f:4f:04:c4:71:33:
21:d6:a6:65:43:8d:b0:28:cf:fd:58:2b:46:e0:ca:
2b:a9:b5:f0:cb:8d:39:2a:73:6d:9b:c5:b8:b0:2e:
be:4b:ea:43:3e:c7:db:2e:4b:35:93:40:1e:98:4b:
e5:9b:74:df:3f:cb:71:67:65:9f:bf:a7:38:16:8d:
db:df:f2:53:e1:6b:68:db:e4:9c:9f:0a:74:5f:fc:
73:d3:98:9e:7c:1e:91:c6:52:26:aa:fb:81:e2:8e:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:1B:12:9B:03:B6:F1:CC:3E:42:53:DD:19:29:3E:45:04:63:56
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:96:07:04:74:94:6e:54:ce:dd:86:79:61:58:0c:82:e4:c1:
0f:81:11:d0:77:21:a0:bd:93:75:1e:a9:61:58:d0:73:67:b1:
3c:0b:9d:c2:e5:e9:7e:3b:0b:c1:20:bc:2e:83:4b:a7:51:32:
ca:35:60:81:ba:3c:db:ec:01:6d:81:91:1a:29:bd:ea:63:fc:
af:35:a4:82:27:e6:f8:28:d8:10:c0:4a:bf:22:28:ac:11:0d:
60:ed:78:91:2e:16:bf:b4:92:3e:eb:43:2f:4f:50:3e:ca:b7:
e9:ce:ca:11:43:50:ab:da:dc:ba:4d:0c:3b:7f:21:23:cc:6f:
35:32:48:ae:ea:92:87:d8:0b:11:ec:16:f0:9f:e0:04:26:f6:
28:fd:31:6d:8c:a9:1b:85:bc:e6:80:40:35:3f:44:11:6a:04:
63:41:6a:0c:a0:6c:1a:06:e0:0f:3b:24:be:82:ee:cf:00:00:
91:2d:e8:5f:60:cc:d4:4c:48:3e:37:15:a7:aa:d0:21:7b:ae:
36:44:79:99:4d:0b:63:62:b1:aa:a2:7a:b9:f0:8b:0f:84:a9:
5a:28:27:6f:cc:ba:b8:9a:cd:43:ba:f2:22:d7:f6:f8:4a:eb:
2d:cd:8c:6a:1d:c2:63:a3:e9:95:4e:07:1c:bc:21:12:37:7e:
6c:3b:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:44 2025 by rpki-client