Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: pt82wjIHoQfn5c9TCkAagrO8M6u5RSm7c3DYM+UnUAE=
Subject key identifier: 7D:CF:0C:B2:65:D9:7A:8A:13:CD:1F:6C:19:E6:13:B1:62:E4:C6:B3
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019923313922AC941FB81E9DE0C5288284C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0E75
Signing time: Sun 07 Sep 2025 08:00:52 +0000
Manifest this update: Sun 07 Sep 2025 08:00:52 +0000
Manifest next update: Mon 08 Sep 2025 08:00:52 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: xsx18WUwT8a+JHNuU2Fz1Gdgo+18UknBhSykT9ow2fs=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:39:22:ac:94:1f:b8:1e:9d:e0:c5:28:82:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Sep 7 08:00:52 2025 GMT
Not After : Sep 8 08:00:52 2025 GMT
Subject: CN=7dcf0cb265d97a8a13cd1f6c19e613b162e4c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:a5:7f:04:64:4b:0b:57:ec:a1:f7:6b:7a:
fd:40:8d:57:94:07:22:82:20:0c:25:3f:0a:f3:88:
6b:9a:51:5a:be:d6:98:19:fd:bb:5b:d5:23:bb:2b:
57:f9:41:17:1a:2c:f5:e9:ef:75:4a:99:43:09:1b:
2a:b5:71:48:c1:6b:ff:33:ed:b0:89:8d:0e:54:b9:
50:13:b2:0a:f5:7e:5e:d4:04:07:fc:e8:bc:ca:f8:
b6:42:58:7d:e7:be:ed:83:5f:ba:87:4e:f7:9f:d6:
26:74:50:8e:8e:ca:de:de:a4:d2:f4:f8:28:87:49:
26:e3:cd:87:fd:a9:e3:39:cd:fc:c7:f7:62:94:44:
c6:57:f7:56:f8:ff:35:e6:81:23:76:9e:b0:d0:ea:
4d:05:84:75:d7:89:23:89:43:21:5a:c4:65:8e:64:
81:75:aa:89:e7:ff:30:1f:18:59:3f:7b:9a:40:e7:
0b:93:81:b2:29:16:88:dc:eb:a3:e4:1c:ff:c2:45:
ad:a1:df:b5:79:81:3a:f3:66:5e:fc:d5:37:23:fe:
aa:01:22:71:91:ca:24:f9:f8:d0:c8:eb:60:b6:12:
43:f6:b0:58:68:1e:29:f0:78:7b:4d:67:72:1b:e0:
eb:55:ae:c4:4c:3d:f7:e2:0c:07:4b:b2:a7:bc:b2:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:0C:B2:65:D9:7A:8A:13:CD:1F:6C:19:E6:13:B1:62:E4:C6:B3
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:14:fe:cf:9e:6a:27:7a:38:fe:ff:e7:e1:21:d9:81:80:
cd:c7:f6:72:b4:5d:54:ae:9f:6e:ca:4a:1d:52:7a:16:e2:79:
03:a0:af:c2:7d:68:90:2e:bd:b0:c7:a7:91:89:aa:ce:2b:58:
4d:69:28:57:8f:31:f5:6e:8f:97:c4:df:90:dc:3f:f9:7e:d0:
fc:cf:cb:44:18:d8:73:b4:83:91:3a:d8:cd:4c:e5:3a:c2:89:
8d:1b:f0:b2:99:30:91:56:99:a0:c1:d1:ad:c6:ba:df:65:53:
c4:c1:43:52:d4:26:5e:7d:ed:41:61:47:52:ba:0a:b5:0f:48:
48:34:91:e8:f7:76:db:46:d3:05:56:0b:66:44:26:38:98:b4:
d6:76:15:af:dc:59:29:0c:f6:15:1d:3a:81:32:25:e9:b2:68:
13:ee:98:9a:dd:3c:b8:86:b3:e4:d4:e5:13:25:9c:25:b8:ca:
cc:e0:95:d8:d4:7d:a6:a0:ac:cc:8e:1d:13:58:28:c4:45:6e:
25:b4:57:2a:84:ca:06:6e:dc:dd:3f:11:a0:0d:f0:b5:68:6b:
81:da:fe:03:eb:be:8f:eb:4c:06:87:08:65:3f:3a:75:31:8f:
6e:6d:cf:96:4c:8e:f1:5e:05:6c:8f:f1:8f:d8:f2:06:73:ff:
b3:04:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:24 2025 by rpki-client