Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: XFZ5Cl0jue2PJzfFh21WZaszH9IdyE6HWVpHRcGblYU=
Subject key identifier: 7C:B5:79:7E:08:91:9E:ED:45:78:07:26:71:57:8E:49:4B:30:40:14
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 019922FA07CD42F2AFDFA057B185875A0C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: JEFZAXV6osfvZ/YuYroFjQ4vqtARERBWJuhSrPTvRpg=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:07:cd:42:f2:af:df:a0:57:b1:85:87:5a:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=7cb5797e08919eed4578072671578e494b304014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:8d:0b:b0:2d:ad:b7:14:8e:03:54:5a:41:
5d:30:25:9e:a9:b5:24:86:6e:53:fe:ea:4a:fe:c9:
d8:5f:74:e3:b9:c6:8b:25:77:54:f8:ac:a7:5d:f4:
25:04:c7:cd:c8:a8:a2:46:ed:09:ab:53:a9:15:87:
af:01:8d:0e:c3:33:53:5c:64:6b:e1:c7:85:b5:3a:
1f:e7:7b:54:34:e5:a5:f9:4a:b2:eb:12:ff:8c:62:
e4:8e:fa:0a:9a:21:2a:ca:ba:0b:4f:68:9e:e7:17:
cc:bb:72:0b:ca:29:aa:8e:b3:46:bd:47:b4:b4:46:
7b:5f:fe:2e:0e:52:0e:1e:0f:eb:fa:9b:bb:05:b3:
28:88:16:a1:fb:ea:c7:1a:a8:d2:6b:0b:03:27:17:
7e:af:42:fd:ed:ba:f7:3f:d7:8a:3e:87:21:e5:18:
7b:fa:ff:ec:22:13:83:06:60:f8:24:48:01:5e:f6:
59:de:19:1c:7f:eb:de:5e:7f:94:ab:67:c4:e4:3a:
2a:87:89:14:60:fc:fb:c9:9b:2c:da:9d:20:bb:54:
0e:91:ef:fe:3e:77:66:56:6b:31:a2:a7:26:55:ae:
c1:e4:d8:0f:c8:e0:fd:5b:b8:d9:59:ca:0b:53:9e:
21:b4:b5:c9:1a:86:f0:06:66:27:7a:9b:18:d3:55:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:79:7E:08:91:9E:ED:45:78:07:26:71:57:8E:49:4B:30:40:14
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:1a:43:cf:dd:17:c9:90:05:d7:fb:5c:3b:e3:5a:09:a2:
cc:78:82:4a:11:65:70:06:8c:b9:29:c8:07:f7:ac:94:ee:eb:
ae:8f:5e:a3:82:fc:91:a5:14:70:ca:7e:15:fd:6b:35:77:52:
6b:42:1b:f7:09:96:f8:f2:3b:8c:9b:09:2c:30:bf:84:e7:7a:
6a:b3:ed:cf:7a:fc:66:f2:2c:3c:73:e7:3a:9f:f0:4d:4d:54:
e2:f7:4e:e3:fe:53:1e:6b:11:62:14:9e:16:a7:33:7f:8c:c0:
f4:9c:2d:c0:b1:44:02:2c:9a:ce:b5:6c:63:1e:78:61:76:32:
55:fb:d0:90:e0:42:37:0a:92:00:7c:62:87:0f:46:84:65:66:
21:02:44:d4:f1:10:a3:ef:92:db:9d:dc:86:72:6d:ad:ed:52:
b8:2a:34:56:ad:c7:32:cf:61:5a:03:a0:16:d7:ac:9c:2b:58:
98:7e:63:aa:fe:b9:da:48:59:9b:33:4a:a4:c8:f4:07:9a:92:
77:f2:2f:b3:0b:79:dd:27:ce:92:1b:c6:c7:3c:14:c4:62:f4:
69:cd:39:16:a6:e4:24:6e:af:3a:13:02:03:2d:d8:10:63:e5:
5d:62:f5:8b:69:bf:14:2f:5f:6a:ed:f1:c9:0a:2d:f1:18:67:
27:60:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:32 2025 by rpki-client