Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: 9c+DJw/oCrRjsm1/OKzusDIbsJTLqy6IjP9CEzP0xEQ=
Subject key identifier: CA:3E:A8:DD:BB:CB:18:D3:68:82:14:51:F2:88:74:BA:05:9D:AA:14
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0199239F01C80A950DC18EA8A63EAE2D19CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: tPJKZA04ng77QlDJZjdrDstKfsOwXEnm1xOhCdCvIow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:01:c8:0a:95:0d:c1:8e:a8:a6:3e:ae:2d:19:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=ca3ea8ddbbcb18d368821451f28874ba059daa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:3d:13:16:c4:2e:1d:b8:b1:64:d6:08:77:
f6:e3:6e:b2:43:b8:4e:78:3c:c1:99:d1:aa:60:f0:
d9:fd:b8:7d:ff:41:14:06:17:4e:dc:05:89:ac:8d:
c0:98:0f:58:9a:50:3b:33:a4:57:a0:5f:ca:24:ac:
27:d8:9b:2b:9f:76:83:0f:51:56:02:fe:08:90:59:
f0:67:13:67:6a:c6:77:25:19:9c:40:44:75:5a:f2:
5c:23:bd:1c:da:9f:63:99:0e:c3:0f:e1:9a:d7:09:
43:7a:23:9f:80:21:b7:7c:5a:c1:22:24:b7:3b:15:
48:72:30:b6:d0:56:51:21:2f:7b:13:d7:e9:13:a4:
21:fc:d2:dc:10:d1:ec:d9:50:8f:da:f0:c6:05:08:
19:82:cd:fb:15:a8:01:0d:cb:2d:c6:77:c6:42:27:
b2:49:8c:f9:11:0c:89:23:7f:ff:af:a4:0d:81:c7:
2c:45:d5:01:15:6c:f0:15:4c:8e:6f:98:b5:14:1c:
af:99:c3:f2:7c:50:a0:f4:51:b2:d8:0a:0f:71:34:
c6:2c:26:60:d8:bc:17:56:12:b2:1d:44:54:01:96:
63:d8:72:cb:cf:c6:c0:3a:ab:15:f3:34:37:b4:03:
21:62:58:cc:03:f4:c5:2c:83:86:a9:58:b4:f7:8d:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:A8:DD:BB:CB:18:D3:68:82:14:51:F2:88:74:BA:05:9D:AA:14
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:75:c8:e2:7f:1a:e7:7d:c8:9c:5b:3a:7e:33:04:38:a0:6d:
a4:44:5a:e4:c5:d4:ac:e0:8c:68:73:d3:73:15:47:ed:26:dd:
35:01:8a:41:a4:e0:a1:95:31:07:10:36:17:2d:98:db:b9:79:
01:08:14:7a:21:bd:a2:b8:17:32:ee:f6:7e:4e:96:fd:cf:60:
c6:dd:4c:56:eb:ba:13:a6:58:a2:56:fd:99:f1:55:06:96:b5:
76:f0:f9:e5:48:bd:55:a9:58:83:a4:fc:b4:49:8e:2e:9c:4d:
c5:0a:2e:e3:6e:b0:6a:e8:2a:15:1d:c7:2d:12:76:98:be:eb:
22:8c:a2:5b:ef:6d:2b:6a:13:eb:2a:71:90:c9:0f:06:a3:89:
cc:bd:62:74:59:e9:4b:43:0d:04:68:9e:79:4b:35:64:32:c9:
ee:89:79:07:d1:4d:8f:00:a8:ef:72:9e:66:65:a2:94:a6:58:
82:f0:ce:72:ca:86:03:f4:ad:99:43:11:82:04:34:27:2e:58:
6a:a4:79:42:9b:36:f6:58:ac:be:55:62:2f:93:81:13:de:6b:
a0:72:ba:a6:0d:83:8b:2e:85:11:48:21:9e:b6:8a:cc:b1:ba:
39:0e:5e:5f:60:21:db:86:0a:0a:1f:c8:71:9a:5b:ed:f4:6f:
d6:fb:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:38 2025 by rpki-client