Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: s8ic1Ng/yuLkDgqzVK8HTKidl6x0iattsCgycq8Z2ok=
Subject key identifier: 2C:52:B9:4B:25:C7:16:C4:5C:FF:CE:BA:DF:CB:97:51:89:52:A3:03
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0199228C87B584ED87FC100AA75A50DC6273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0DD8
Signing time: Sun 07 Sep 2025 05:00:59 +0000
Manifest this update: Sun 07 Sep 2025 05:00:59 +0000
Manifest next update: Mon 08 Sep 2025 05:00:59 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: IDqpZI4DdwgkS2YstjKn2eJyo5QVDtDaPDEYDYJgXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:87:b5:84:ed:87:fc:10:0a:a7:5a:50:dc:62:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Sep 7 05:00:59 2025 GMT
Not After : Sep 8 05:00:59 2025 GMT
Subject: CN=2c52b94b25c716c45cffcebadfcb97518952a303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:88:f6:bd:50:e3:f4:c0:3d:6d:a0:80:a9:
13:ff:b9:81:b5:e3:17:d6:1e:01:61:18:84:cf:2f:
63:32:b7:72:65:bb:c1:00:21:64:80:ca:fe:29:b8:
c9:0c:5e:23:b9:5d:02:30:31:e4:0d:68:6f:a0:ef:
e8:39:b6:54:1d:ac:2a:1d:a3:4f:64:3f:8e:24:43:
dc:46:b7:ac:59:24:ee:53:1a:30:f9:d4:62:df:b1:
2b:56:82:c1:19:27:ed:63:5e:ba:a5:c4:a9:07:03:
f4:63:c2:ac:e3:97:3d:8f:77:a4:84:bc:e8:95:c8:
0d:39:cf:9b:c0:e4:d9:95:6a:14:05:5a:db:14:06:
1c:46:65:4e:76:6a:0a:12:3b:d7:18:0b:f3:b9:06:
a4:48:74:1d:ca:fd:7f:2d:ec:cc:6b:13:fb:63:d9:
e7:3f:4a:64:3e:db:2d:d2:97:00:b3:2e:cc:8d:d6:
d8:07:73:fe:c7:69:05:43:50:d7:d4:3a:1b:7d:25:
b9:92:6b:4e:06:5c:6d:fd:72:32:19:0f:2d:d9:59:
ad:0c:2b:ae:d3:71:96:00:ad:16:fd:24:90:e1:0c:
de:4d:16:78:7f:e7:e6:c0:53:d6:33:42:a1:f0:0d:
45:d9:7e:21:1c:b5:48:7b:e0:11:e5:80:66:6d:fd:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:B9:4B:25:C7:16:C4:5C:FF:CE:BA:DF:CB:97:51:89:52:A3:03
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:ea:bf:57:7f:2f:fe:41:5e:7d:fd:4a:f4:c4:8a:76:af:
52:e7:c1:40:bc:99:5e:64:4e:05:59:f4:54:27:a0:b4:e8:9a:
c4:5e:7f:df:bd:22:07:08:e0:e0:97:71:42:d8:2c:e5:2d:05:
0f:b5:df:38:97:cb:10:ab:39:09:a1:e3:a2:e2:f3:d3:86:33:
6d:4b:43:a9:79:ae:35:0f:06:27:50:28:6f:c2:3d:7b:0d:dc:
64:23:c9:67:bf:c1:0c:56:bb:cf:e3:f1:5c:d6:3b:9f:fe:5d:
98:59:82:7b:63:6a:68:87:5d:2c:92:ef:18:d7:25:27:f9:11:
97:e7:23:e6:a7:5a:9b:40:fa:e8:9b:8d:4a:91:23:0f:a5:f9:
d9:9f:df:a1:26:44:05:2f:81:82:84:91:d2:66:47:c5:be:66:
4f:c8:16:79:b4:6f:d6:24:b7:5d:44:38:53:ef:75:1c:0a:e1:
4e:31:65:c5:eb:28:3e:36:a7:c7:de:d3:d4:ea:20:88:84:e0:
50:42:d8:59:0e:28:3d:b4:a1:a6:40:42:34:61:0f:46:65:85:
07:6c:10:27:71:5f:a9:5e:7b:82:04:25:ab:67:94:72:8c:92:
b3:9f:bf:b5:c5:50:a5:be:7a:85:6d:63:96:25:58:c6:aa:56:
8d:ca:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:00 2025 by rpki-client