Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: uC21aTMLaJRIsGWqISar6My/Vdc0aAPaT3ZV5mBKfrs=
Subject key identifier: FE:47:19:34:F7:47:66:E5:90:87:A3:1C:34:09:00:FA:35:FC:6A:33
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 0198CC1412F64B5AA9D90360D604249A7CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 15D7
Signing time: Thu 21 Aug 2025 10:02:04 +0000
Manifest this update: Thu 21 Aug 2025 10:02:04 +0000
Manifest next update: Fri 22 Aug 2025 10:02:04 +0000
Files and hashes: 1: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (hash: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: 9jzbi310l8hDiWaahX+RGvFJm5Zfzt4O8wxfhQANIug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:14:12:f6:4b:5a:a9:d9:03:60:d6:04:24:9a:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Aug 21 10:02:04 2025 GMT
Not After : Aug 22 10:02:04 2025 GMT
Subject: CN=fe471934f74766e59087a31c340900fa35fc6a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:6d:95:c6:a4:ff:26:d7:ca:72:f4:b3:1a:
6c:1e:32:63:60:27:d4:9c:70:0c:92:00:59:57:c5:
86:68:db:b3:9a:47:91:69:2a:56:cd:2b:99:d1:05:
94:97:d5:ef:fd:d7:86:48:f7:68:3c:05:48:f8:f7:
f8:ba:02:ba:1f:03:52:95:99:8b:3a:24:1a:56:f8:
be:ac:6f:62:a7:09:65:e1:09:ad:19:52:e3:e4:d0:
23:26:e3:62:6d:56:72:a4:ec:7e:ba:be:1d:be:2f:
33:78:c0:9f:45:01:c9:09:fe:19:7a:4f:6e:24:9f:
c1:88:f4:e3:77:9d:36:cd:95:d1:a1:ea:96:f8:49:
f0:f1:94:28:df:fd:56:df:2c:72:96:cb:23:82:1a:
d3:80:cd:38:ca:65:f7:30:bd:49:37:60:5d:7c:e0:
e0:6d:ac:4e:28:d5:dc:87:c3:32:24:57:a3:0c:0f:
7f:08:5a:60:65:66:5d:57:d3:35:ad:8d:48:b7:ba:
44:fd:e3:88:ef:3c:e6:04:66:60:01:56:e8:65:0b:
eb:37:8e:c6:3f:f0:8e:b0:e9:95:6e:ef:dc:c8:9e:
43:dd:5f:8e:c4:be:a6:eb:f2:74:c6:fc:61:69:48:
83:c4:d5:c7:6c:76:82:0d:88:75:14:31:15:0a:bd:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:19:34:F7:47:66:E5:90:87:A3:1C:34:09:00:FA:35:FC:6A:33
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:a9:6f:2f:e7:9d:f9:e1:48:0e:99:65:75:10:70:80:5c:
6f:dd:a3:90:57:78:25:0b:d3:ab:6b:aa:22:1b:24:3a:6f:82:
5c:39:84:95:f6:e4:7e:c9:0c:74:1f:2e:59:3e:9a:98:93:75:
07:1b:aa:00:88:69:97:a5:b6:3e:85:49:30:4c:07:d9:7a:1a:
6e:fb:15:6e:ca:b8:06:b3:f4:0a:35:49:e1:e1:f4:be:3c:9b:
ab:0f:5e:3d:1c:19:97:e0:81:97:06:a0:cc:ec:5a:8e:8a:ec:
fb:11:42:72:96:9a:37:78:c8:e8:28:26:1c:06:dd:54:99:b7:
75:0a:17:cf:1e:76:82:1d:91:0e:f1:2b:68:e5:34:fe:af:82:
cf:64:1b:bc:dc:51:fa:fc:c0:87:36:25:8d:5c:fd:f7:73:ff:
7e:34:82:94:49:65:51:33:41:9a:f7:4f:aa:a9:58:fb:d8:91:
df:0d:05:59:db:15:5f:e4:30:48:05:85:41:66:7a:54:f7:e5:
43:60:1e:51:c6:05:7b:ae:6c:47:84:48:73:bf:40:12:32:c6:
73:60:04:0c:9e:e6:98:5b:cc:de:eb:77:7a:33:bb:c6:6a:49:
99:cf:01:93:ad:6e:90:0a:47:4c:06:f7:e1:59:6a:d2:00:43:
fd:95:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:46:21 2025 by rpki-client