Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: lORGBRAk4MXRvNg/1Waie5FAkAu1BCeSjPSZ7LY9j/4=
Subject key identifier: 68:81:9A:5B:2A:12:59:1A:57:06:3C:FD:9A:75:97:D9:BD:34:22:1B
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0199161AB2C809364AE1556145E397292D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0261
Signing time: Thu 04 Sep 2025 19:01:12 +0000
Manifest this update: Thu 04 Sep 2025 19:01:12 +0000
Manifest next update: Fri 05 Sep 2025 19:01:12 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: xDaAbvyoy9l/jb2k4wGm6gTNZuVsVShxNp1di8kBYbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:b2:c8:09:36:4a:e1:55:61:45:e3:97:29:2d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Sep 4 19:01:12 2025 GMT
Not After : Sep 5 19:01:12 2025 GMT
Subject: CN=68819a5b2a12591a57063cfd9a7597d9bd34221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:a6:a9:9c:43:79:32:58:65:a5:0c:af:11:
4b:35:7d:28:ed:5e:03:23:e5:38:74:29:a7:25:26:
08:3d:77:9f:15:03:65:46:24:14:52:0f:c0:1e:29:
64:c0:c5:6c:35:55:1e:f9:8e:63:e1:f5:27:54:a7:
e4:db:7c:2c:00:b3:5f:74:d7:9a:cc:09:2a:aa:be:
a9:32:82:e4:80:e9:e9:b6:95:61:f7:07:a6:d5:f7:
9f:2b:63:0f:d6:5f:42:e7:a9:3b:87:0a:78:a9:d6:
99:43:0e:d1:19:b7:40:c6:ce:e4:c7:02:bf:b9:14:
84:47:9f:ac:cc:6a:c9:98:bb:ec:2b:c4:b5:81:0d:
5d:4b:f8:9e:a8:b7:bb:96:64:50:2d:af:f4:4a:98:
0c:9a:9d:b2:80:ad:6e:2b:a9:5d:a0:21:03:14:86:
78:93:65:49:93:41:29:87:63:80:0b:3a:70:fb:be:
fb:3f:44:e2:1c:7d:54:dc:68:23:11:32:63:77:42:
fc:c5:ec:0b:e0:f6:00:16:77:3f:1a:93:6b:bd:88:
82:ff:59:25:e4:0a:79:2f:b8:5d:99:b7:de:b4:9c:
ff:73:0b:bd:01:85:92:cc:79:55:01:e8:86:8d:b2:
e9:5d:9a:30:f7:e7:93:b0:f7:ab:6f:53:af:5f:e1:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:9A:5B:2A:12:59:1A:57:06:3C:FD:9A:75:97:D9:BD:34:22:1B
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:36:3e:33:a9:d1:87:07:f1:3f:33:4a:00:19:28:db:65:8c:
66:5b:0a:f3:86:4c:f2:c2:c6:9b:e2:fb:b9:83:51:bf:8d:07:
85:94:1a:e4:f3:0c:38:71:fa:3d:36:3e:d8:c9:8b:64:83:0f:
70:df:3b:71:68:c0:8f:49:d3:a5:ad:02:ef:bc:e8:d2:76:f8:
b4:f6:ac:a2:e8:a9:8a:4b:c9:62:6a:76:5c:43:86:f8:e6:b2:
79:52:6f:24:61:eb:26:aa:e9:19:39:b1:1d:40:da:c9:99:f2:
ee:15:94:77:82:c4:a3:cd:c3:2d:68:48:17:36:fc:0f:e3:ee:
6b:0e:48:b6:32:73:eb:c9:db:ad:40:62:06:17:6f:11:92:c5:
13:81:97:a4:33:b4:9a:cf:62:88:b7:25:e3:30:2d:f0:4d:c8:
55:97:e2:22:83:67:48:bc:7c:d4:be:47:fc:db:85:d7:6d:26:
62:ea:cc:54:10:f1:e5:1e:34:32:65:27:4a:84:e0:7b:3f:9b:
24:8d:76:29:34:2b:da:81:1a:9a:0b:97:03:e6:2f:e6:44:b9:
95:03:69:b3:74:42:55:b7:d3:c4:a6:09:e6:23:89:e7:14:96:
65:68:46:ac:c1:e9:b8:0c:80:d9:5e:38:86:ee:ab:d2:be:81:
d9:96:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client