Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: WCevFGuu3CVBXAb2DzClPGj5xsSiAZlcnedAB32xZVg=
Subject key identifier: C9:83:4E:44:28:73:7C:34:44:C6:BE:12:D2:42:ED:43:F2:F8:DA:7D
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019950407B3EFBD3C36616B7FA141AB6B763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0FF1
Signing time: Tue 16 Sep 2025 02:00:27 +0000
Manifest this update: Tue 16 Sep 2025 02:00:27 +0000
Manifest next update: Wed 17 Sep 2025 02:00:27 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: hMj8ukf8FsLNfyblqf3sJAZRl5sj0abArrCDeMASjf4=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:40:7b:3e:fb:d3:c3:66:16:b7:fa:14:1a:b6:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Sep 16 02:00:27 2025 GMT
Not After : Sep 17 02:00:27 2025 GMT
Subject: CN=c9834e4428737c3444c6be12d242ed43f2f8da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:7f:a0:6f:af:2c:0e:1a:90:04:ae:5a:16:
aa:9e:9d:e4:0c:db:bf:66:75:0e:7c:2d:98:d6:7d:
a1:fd:13:e9:fc:e6:fe:d5:1f:b9:46:8b:18:68:95:
28:52:ce:cd:50:dc:88:a0:41:7a:fb:c0:89:9d:4c:
bc:59:78:9d:df:b4:c5:c0:88:94:c6:da:e6:1f:cd:
4c:e9:8f:07:03:43:b3:3d:16:a1:bf:9a:0d:5f:fb:
8f:89:45:14:00:2a:64:bd:0e:c2:ab:8a:86:37:97:
05:12:36:12:3f:d2:43:29:b4:d6:33:5b:38:cb:1a:
40:d5:8f:9b:93:54:1d:c9:85:b3:6e:79:a3:65:7f:
2c:98:7d:d8:22:5e:7e:a1:74:bf:d7:18:2d:24:69:
18:dc:b7:8c:11:29:2c:8a:d2:4d:c8:71:47:20:f6:
7d:a8:75:0e:34:c6:6b:96:78:47:7d:b6:97:37:00:
cd:9a:7d:c6:dd:c3:6e:ff:a8:58:de:11:e7:46:57:
d9:90:46:75:98:cc:66:55:d6:bf:18:1f:74:f7:21:
78:37:54:ee:60:8d:f2:e1:d6:88:2c:d1:b5:1a:7f:
d0:42:e5:b8:f5:b2:04:52:a1:0b:69:d3:23:f5:fe:
e8:b2:b4:b7:9a:93:67:ff:39:18:81:d1:7f:0c:3e:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:4E:44:28:73:7C:34:44:C6:BE:12:D2:42:ED:43:F2:F8:DA:7D
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:b7:48:25:34:e4:5b:8c:da:d7:48:fd:97:47:fe:03:25:
e4:51:47:0d:11:b0:02:93:95:f1:46:af:d7:f8:da:cc:70:c6:
2b:c3:4e:97:de:35:95:b5:16:0e:7b:db:bf:4f:d1:1d:c9:d9:
76:aa:98:2b:6f:b9:b0:63:21:36:94:cb:7c:4e:5d:07:5b:d3:
64:bc:92:1f:f8:ca:d0:75:47:c0:8b:1e:3b:a2:94:81:f1:40:
bc:3b:f8:af:b0:25:b1:b9:c7:61:6f:4f:97:c8:cb:ba:5e:b0:
84:fd:94:40:24:05:6c:6f:df:54:d3:e9:32:d8:9e:41:f0:1b:
4d:b6:48:c5:53:9f:0b:22:1f:37:c5:88:78:11:87:30:b9:76:
96:b1:eb:7e:d3:26:14:f1:86:11:e4:00:26:95:52:62:a9:d5:
4c:e6:fd:96:35:9c:36:9d:44:6f:8e:6d:58:5d:39:95:4e:86:
84:0b:5b:13:68:8c:62:1f:07:51:9f:8d:f6:ac:e4:15:20:a5:
63:87:6a:71:af:da:9a:6b:d0:cb:d7:e9:13:11:cb:d6:9f:3b:
0e:1c:77:d3:fa:e9:cc:7e:a5:93:34:a8:0e:2e:e9:2f:1e:92:
50:74:ec:89:56:39:0c:50:03:48:98:64:8e:d9:fe:d5:3e:d5:
7c:4d:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:30:43 2025 by rpki-client