Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: Gkik7S1LP0+hbh7N5AxjG/0POpXP/RC+vyh4r5vTD4w=
Subject key identifier: 2C:EA:76:FE:BA:71:A9:F7:40:36:46:E8:F6:1F:72:B0:B8:6C:08:3A
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019927EA6B70826A74D85FA03137F6E6BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1609
Signing time: Mon 08 Sep 2025 06:01:38 +0000
Manifest this update: Mon 08 Sep 2025 06:01:38 +0000
Manifest next update: Tue 09 Sep 2025 06:01:38 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: dFX74F1Wal3DyNKps+ZG8Lat1bC5TVaL4/ly22ThSTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:6b:70:82:6a:74:d8:5f:a0:31:37:f6:e6:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Sep 8 06:01:38 2025 GMT
Not After : Sep 9 06:01:38 2025 GMT
Subject: CN=2cea76feba71a9f7403646e8f61f72b0b86c083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:d3:ef:0e:8d:02:2b:be:da:83:2e:f1:a4:
43:2b:4a:af:62:0c:a8:16:2e:2f:6f:30:06:f7:98:
2e:5c:3e:41:ab:ce:cc:1f:2a:3d:13:3f:68:16:ed:
fc:f5:14:08:42:99:9a:aa:7a:e4:da:9a:7b:4c:23:
38:67:77:7b:53:89:c5:d3:07:47:68:fa:e8:6b:cf:
be:61:35:ce:99:57:18:dd:b0:d0:5e:60:05:87:57:
df:dc:cd:69:90:c6:e8:81:06:c8:e4:e9:55:22:dc:
75:d5:ef:60:61:e8:b4:16:f7:8c:3b:cb:5a:2f:b8:
e0:09:da:97:89:eb:5c:a9:be:e9:b1:bd:de:a2:f3:
5a:e3:32:25:66:ef:62:ad:3b:37:2d:5f:19:5c:70:
c3:59:80:eb:60:ce:16:c6:4d:02:16:20:e1:f5:73:
54:f6:bb:89:e0:06:9c:4a:e9:59:23:22:e4:ed:47:
6a:67:fe:7c:50:a1:9a:63:5a:d6:1e:30:9c:55:dc:
cb:d7:ba:74:88:51:1a:82:cb:b7:84:b1:08:f8:65:
e9:50:39:a0:7c:88:ce:22:4b:75:35:f8:1b:23:ed:
24:0c:81:d2:4b:4a:34:f8:f9:33:c9:6c:7f:07:0b:
69:9d:5d:42:29:02:37:52:a8:e1:99:bb:d8:31:d6:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:76:FE:BA:71:A9:F7:40:36:46:E8:F6:1F:72:B0:B8:6C:08:3A
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:e1:3a:0f:6f:a3:30:41:e6:7d:86:11:33:8f:25:9d:4c:
6b:b0:85:25:22:5d:96:44:d8:3c:d6:1a:fd:a7:c6:d0:04:28:
a2:09:2a:ae:86:7f:0a:92:80:3f:1c:47:77:50:e3:53:74:2c:
83:a8:92:58:d2:2d:a8:58:54:99:cf:1d:58:35:82:d7:35:c6:
26:2f:00:c8:49:23:4d:7c:d3:34:30:b1:57:81:ab:56:e6:f3:
e3:8f:01:9d:c2:54:90:a0:1f:05:e9:9c:f5:f9:c3:d7:e9:e0:
6f:5d:04:fb:e6:de:5e:99:65:9c:1d:7d:9d:72:75:79:aa:96:
b0:25:1c:fa:4c:25:40:a5:cd:51:50:2f:b4:67:ed:f3:91:a6:
13:3e:26:5c:ef:f5:24:23:39:53:29:3c:4d:5c:53:09:2b:fe:
2a:67:e7:d1:28:78:32:d6:61:7d:45:17:e4:39:d2:b5:70:5a:
34:43:b5:c8:eb:e3:fe:d8:ff:81:e2:88:70:97:d5:e4:99:23:
4e:84:5c:f3:52:c5:0f:09:e5:4f:25:b4:6c:a0:5b:1c:9b:a6:
d0:eb:55:cd:b2:e3:92:23:7a:0e:b5:89:7b:2f:5b:2d:b0:39:
60:0d:7a:6c:26:32:52:fc:0d:6f:2e:bc:67:f2:1b:08:a5:ad:
8d:ea:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:55:39 2025 by rpki-client