Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: MnaM9A7YW1MDPpLEd1IJdNR9wwtVEw49s0NbQYZsRt0=
Subject key identifier: FA:32:D7:8E:8A:FA:BB:87:DE:0A:4F:CE:BC:7A:7F:6D:3A:33:17:2C
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019931FF0D980DCE6AA451AF5D33FC64D52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 05:00:22 +0000
Manifest this update: Wed 10 Sep 2025 05:00:22 +0000
Manifest next update: Thu 11 Sep 2025 05:00:22 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: Y3FkziO1pgB0pUWqRKHN6CMgMpjhWN3mxcoPPjBhZuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:0d:98:0d:ce:6a:a4:51:af:5d:33:fc:64:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Sep 10 05:00:22 2025 GMT
Not After : Sep 11 05:00:22 2025 GMT
Subject: CN=fa32d78e8afabb87de0a4fcebc7a7f6d3a33172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:f0:27:6a:06:dd:d4:a1:27:3d:e5:be:31:
df:4a:47:65:43:05:1f:ac:63:10:87:7e:ee:35:8e:
cf:da:09:f0:dd:1e:12:61:ed:63:41:65:6f:19:b3:
eb:3c:7c:d0:35:62:9b:55:f4:dd:2d:1c:e0:9d:c6:
cf:8d:8d:6c:a2:1a:e9:c3:35:f7:10:c0:23:3c:1b:
65:c3:d9:1b:4d:d5:4c:63:9e:80:45:1a:7e:c4:67:
0b:be:8b:3c:cb:98:d1:34:25:ad:42:ed:b7:cb:b1:
6b:60:09:5f:31:96:a9:9e:70:bb:7c:07:6b:b0:27:
c1:a7:07:66:de:d2:95:70:eb:7f:1b:93:79:f9:ef:
cd:42:7f:6a:5e:a6:dc:26:e4:35:d0:dc:88:54:93:
01:bc:64:0c:cf:d3:53:8e:8b:5b:cd:00:6d:c5:89:
59:ba:1b:6c:d6:c9:e4:52:0c:db:33:bb:83:f6:68:
a4:3e:6e:1a:bf:de:ef:30:83:52:6e:df:7a:38:0c:
ba:69:ff:17:58:0d:9e:e8:51:9a:25:10:ee:b0:7c:
58:ac:7e:a5:71:53:ca:a4:c6:09:6d:e6:72:b1:b5:
e7:54:aa:81:fc:54:9f:96:10:51:f9:01:d9:a3:bd:
f1:b1:7e:27:5e:19:93:e1:ab:e3:4e:93:18:d1:ea:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:D7:8E:8A:FA:BB:87:DE:0A:4F:CE:BC:7A:7F:6D:3A:33:17:2C
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:1c:db:26:e9:9b:d9:8c:5b:c8:01:ad:70:7a:85:80:f4:
21:42:82:59:e4:9f:6f:f4:66:0a:57:9e:ae:02:21:d6:c6:70:
90:15:c1:0a:7d:95:0d:24:a9:d9:ae:ab:0a:23:0a:cb:b2:0e:
f0:62:f5:c8:64:63:86:a1:bf:62:56:52:cc:3a:a2:20:b3:b7:
11:27:21:ee:2c:40:b7:9d:62:9c:b8:7b:05:e8:ad:da:53:c0:
55:8c:79:66:b8:92:b7:4d:c4:53:bc:ac:5f:64:1c:0e:cd:b0:
ce:e5:eb:76:5c:ae:7c:f3:7d:77:fa:10:e9:07:3d:83:c8:ea:
cb:21:7c:77:8f:9f:64:09:9e:17:41:7d:f7:a5:0d:db:22:40:
0d:eb:ea:07:b1:01:c5:1f:63:ea:43:d5:75:f6:62:b1:e1:d7:
e8:f8:7e:60:20:ee:86:26:4b:9f:b0:a4:bc:9b:40:e1:4c:ba:
5b:04:30:1f:99:49:22:85:be:63:82:00:b9:b5:dc:60:1d:48:
fa:e4:1d:a4:56:5d:a8:c1:2c:8e:07:41:54:5b:d9:7d:02:27:
fc:ae:5b:27:6e:40:72:93:60:3b:82:f1:f5:4d:8f:39:9d:aa:
c8:97:2d:66:5d:3d:65:b5:84:ff:2b:b0:ec:be:01:aa:7a:2e:
ca:a3:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:15:54 2025 by rpki-client