Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: VqZa/wI+you3NIUP9/nksBn37rRHjuDCr69M+B3h5bw=
Subject key identifier: B2:16:94:A7:1A:CF:96:37:12:65:CE:46:DE:F8:5F:62:6B:9D:51:B6
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 019922FA0B658AB488382BFD45FED3959B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 10DA
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: daxYvvl/6coc7xHF7OTv3lulsSwEW/N1xhgb2hFXGFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0b:65:8a:b4:88:38:2b:fd:45:fe:d3:95:9b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=b21694a71acf96371265ce46def85f626b9d51b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:84:ee:ae:a0:72:5b:1d:e0:d1:75:f2:10:
40:37:bd:c9:13:ad:81:45:41:0e:12:a4:84:21:07:
94:61:37:9c:3c:6c:0d:d8:de:dd:5e:1c:5b:63:73:
96:9f:8f:be:0a:6e:a4:df:70:ca:c5:1f:bf:c8:e7:
18:fa:c9:df:e8:6c:3e:ec:2a:60:c7:eb:df:0c:29:
e5:53:99:dd:80:f9:92:a8:76:9a:2f:27:fd:20:c1:
00:a6:92:ea:96:cd:0f:b7:b8:8d:26:37:1e:37:fe:
80:df:7e:10:01:29:51:98:e7:2e:a7:1b:41:9e:28:
43:d4:9e:58:56:ae:d5:67:8a:66:e0:11:05:8b:57:
8e:d6:b1:56:bd:8f:de:be:de:9b:91:03:5c:c1:0d:
08:80:29:be:d5:dc:b8:69:63:15:b6:f8:4b:34:73:
78:db:6c:2c:e4:63:7b:d6:a2:13:94:8c:29:6a:1e:
62:01:63:f7:4b:b5:7f:81:0c:b4:a2:28:34:5c:de:
eb:6f:ac:26:8e:09:48:61:f5:ce:dd:d3:9b:a9:46:
d7:04:57:0a:2f:b7:32:51:59:20:41:4d:12:4d:6b:
f3:83:ea:66:08:8b:15:23:1d:77:3e:6f:dc:32:71:
f0:23:0f:6e:58:1e:8f:ea:f6:f5:32:b1:4e:25:89:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:94:A7:1A:CF:96:37:12:65:CE:46:DE:F8:5F:62:6B:9D:51:B6
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:df:83:54:2f:3d:25:6f:13:df:62:34:f1:09:d5:14:0b:47:
12:94:4d:3a:4f:f6:57:7b:93:85:fa:f4:3f:66:3f:80:cb:ac:
42:03:af:92:81:95:1b:36:9c:a7:01:67:27:74:99:91:d2:88:
4d:82:89:ee:e2:23:7b:52:05:c6:c6:0d:a4:b9:ba:35:75:61:
15:33:27:15:d7:52:11:55:83:24:11:b5:0e:59:82:a0:6e:2a:
45:46:9f:15:af:f9:db:4e:2b:b9:96:4f:ee:b8:f8:a2:7f:79:
09:27:e5:fd:31:66:b0:96:82:60:62:45:ef:8e:77:15:8c:02:
b7:f2:8b:9a:81:ef:8a:cb:16:57:83:ab:57:4c:9c:9a:39:fd:
f1:18:20:57:23:49:bc:9c:59:5a:83:e6:5f:8c:67:13:c2:54:
9f:f4:13:91:ff:81:db:38:65:c6:4d:62:78:29:51:56:ca:03:
e0:fe:76:db:4f:d1:11:f5:d2:12:5c:20:13:58:bd:dc:55:53:
49:69:f8:b3:83:58:11:d8:b7:e8:95:11:e8:99:db:93:e0:ef:
2f:55:c9:9f:e8:d7:1a:de:b1:c6:a2:b9:b0:e9:97:82:2c:0f:
69:b9:c9:d2:62:27:f0:16:5a:80:f0:14:c3:ff:ec:91:27:f5:
d5:02:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client