Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: 6wzTysKlqtI3UrO8yiD/lMHRm9HysQA7gSg43xnveuc=
Subject key identifier: 4B:F9:2F:A0:04:52:C6:BA:93:10:6E:1D:9B:20:5C:1A:4C:0D:DB:E1
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 01992E9063AE635006E0BA029B892647609F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 0217
Signing time: Tue 09 Sep 2025 13:00:38 +0000
Manifest this update: Tue 09 Sep 2025 13:00:38 +0000
Manifest next update: Wed 10 Sep 2025 13:00:38 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: B7/e3dV2OQciAu+vKW8PGst/RVxU/gYSNVvdJqNbkEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:63:ae:63:50:06:e0:ba:02:9b:89:26:47:60:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Sep 9 13:00:38 2025 GMT
Not After : Sep 10 13:00:38 2025 GMT
Subject: CN=4bf92fa00452c6ba93106e1d9b205c1a4c0ddbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:88:2d:84:d7:1e:6d:07:88:74:51:28:68:
84:a8:36:a7:de:c5:75:8a:aa:4e:29:4e:88:de:28:
9d:33:90:f8:5f:93:aa:a6:1a:6a:6b:af:d4:97:11:
70:5c:c4:11:e8:af:10:ea:e6:cd:66:50:6f:7d:a9:
04:c6:d5:b2:03:8e:bc:fd:a6:de:d4:f3:63:9d:9c:
b5:c1:2e:a6:48:d9:78:0c:64:68:3e:7d:99:2e:98:
ee:81:a1:16:d4:dd:90:db:07:b0:5c:49:c8:8a:b3:
8a:36:72:71:9b:d0:b9:6a:ab:69:75:ea:bd:e0:25:
0e:0c:00:7a:47:59:ea:cc:d7:4b:81:2b:4e:e7:be:
65:c0:f9:75:31:02:02:d3:49:ba:6e:b7:b2:f9:5c:
24:79:a7:d1:d8:ba:52:d5:3e:75:15:76:50:e5:f0:
67:fa:f6:02:b5:a0:6e:5f:9f:6b:2a:01:2e:e4:a8:
d9:71:4a:e8:d1:52:85:0f:3a:f4:1e:02:64:96:59:
f8:c4:17:ae:ac:76:51:8e:3b:da:a5:9c:86:fa:37:
c2:f7:5a:8b:e1:3d:61:a3:18:37:22:36:11:a7:c9:
c4:f5:25:12:83:3e:61:f5:e7:3d:77:72:a8:65:2c:
46:75:8a:58:ae:34:1c:e4:57:a7:fa:f2:54:8a:70:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:2F:A0:04:52:C6:BA:93:10:6E:1D:9B:20:5C:1A:4C:0D:DB:E1
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:e0:81:2a:6d:fd:9a:a9:4d:0a:11:83:64:18:ff:1d:6a:
f8:70:34:5c:ef:89:55:94:a6:71:b2:89:9f:5b:41:ef:c6:35:
b5:41:ea:cb:b0:36:d1:b3:36:3f:e2:ee:48:46:90:8a:8f:bd:
a3:84:a4:bf:0f:99:33:26:a6:91:74:ee:83:09:0d:58:26:1b:
17:50:f8:4a:33:69:1c:a9:34:f7:4c:6e:4b:21:a9:43:61:7c:
3d:bb:cc:4f:28:0a:0d:00:93:89:d0:7c:c0:8d:05:55:e4:91:
13:44:c8:93:3f:fa:c4:b9:42:e0:5c:e0:c6:ee:ad:af:10:ae:
39:ce:84:c7:52:62:17:7f:a0:a0:79:b1:e3:9b:99:04:21:37:
a0:8a:18:26:ce:89:47:d2:d7:d9:03:2b:dd:d7:3d:39:b3:e3:
b5:c0:af:02:41:03:8e:87:58:79:d3:7a:30:17:b5:66:99:91:
51:a8:d5:fb:b4:dc:97:2d:cf:b6:db:17:f9:58:97:05:97:e3:
a0:11:92:89:49:1a:97:1a:32:1e:74:77:8b:a3:57:a0:34:d5:
4e:fe:6a:a1:74:2a:9e:49:22:34:3f:aa:dd:f4:c7:51:75:7d:
c1:e2:a1:fc:5a:67:0b:f9:21:4f:73:73:fd:61:9f:9e:c0:ec:
d4:d1:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:10:38 2025 by rpki-client