Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: oRNZkCaI+LWTByLHAy/KwFdsVH8iz8UWV0QIh5ZJVA0=
Subject key identifier: 51:9E:84:33:81:B7:13:53:54:44:24:80:B9:77:15:BF:95:66:79:67
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019921E78250A925840C7CA25B76CB710A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 05EA
Signing time: Sun 07 Sep 2025 02:00:44 +0000
Manifest this update: Sun 07 Sep 2025 02:00:44 +0000
Manifest next update: Mon 08 Sep 2025 02:00:44 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: GZhp/F6wdF6r4Q6UrvUVDTdq/U/9RRtePbOdU2oUWPE=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:82:50:a9:25:84:0c:7c:a2:5b:76:cb:71:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Sep 7 02:00:44 2025 GMT
Not After : Sep 8 02:00:44 2025 GMT
Subject: CN=519e843381b7135354442480b97715bf95667967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:5a:98:36:ac:91:ca:c7:fc:c1:a4:1a:67:
1f:b3:76:c9:46:13:74:ef:93:04:fc:2e:2c:7b:27:
9a:fb:62:df:87:89:6f:92:e2:4d:02:6f:c8:a8:0e:
17:1f:7b:c2:39:cc:96:91:b0:67:71:15:af:e6:f9:
b0:a9:e4:3a:be:2b:fd:90:b4:ff:55:fc:54:95:47:
64:8e:ee:53:bf:5f:27:16:a3:1c:e5:62:5c:80:59:
72:c7:10:b9:b0:60:85:6e:60:34:76:e1:8a:ce:5a:
13:2e:54:eb:d5:b7:8c:a7:e8:71:f9:11:e1:ff:56:
db:5b:76:fc:9a:3c:f0:33:c4:6c:2a:54:88:da:7e:
31:c6:3f:58:69:a0:5b:66:7f:2f:8e:74:c4:d6:c4:
42:ae:44:60:2d:5e:b1:95:05:bd:44:55:59:50:9d:
e0:73:70:7a:1e:2e:69:d0:83:13:c2:d4:98:58:2d:
24:4d:99:44:55:44:85:8a:9f:2a:3e:b1:21:ac:31:
6d:0c:08:a7:d4:b9:91:f5:78:80:50:2a:a2:47:d4:
10:79:64:12:b8:dd:bb:b9:0f:a5:52:ba:8c:3d:d2:
c2:fd:a5:43:f2:fe:ca:bb:59:fa:df:f6:41:a6:d3:
e0:5d:28:bb:4c:03:56:32:f7:2e:36:e3:3a:f1:b5:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:84:33:81:B7:13:53:54:44:24:80:B9:77:15:BF:95:66:79:67
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:be:77:31:b0:8b:af:a2:17:16:6d:07:80:25:af:98:b8:
ab:ca:96:96:78:b3:b0:2b:7e:a1:bc:ae:6e:28:d8:11:56:bb:
c3:31:0d:1c:f6:ca:18:b1:77:5b:36:e3:99:4b:8a:ff:2c:07:
d6:81:b0:73:51:7c:4b:16:9a:32:d8:81:60:bc:16:92:15:1e:
31:98:60:ec:ac:6b:73:15:09:a9:66:23:f0:0d:0b:76:97:bc:
9b:7f:d3:c8:4b:bb:0d:6f:57:40:8e:08:e8:77:db:0d:07:1f:
46:81:cb:f8:b1:6f:65:40:4a:b9:07:c0:64:2b:17:95:94:71:
47:70:0c:96:f4:8a:92:b1:06:80:e8:5b:25:23:74:8f:a8:53:
a3:74:8c:1f:4f:79:3c:0d:4b:84:ec:ce:aa:58:af:c9:2f:7b:
2a:2d:70:d4:65:e4:60:9d:e0:78:1b:ae:8e:2b:2f:f5:28:50:
c7:58:a0:07:5a:49:3b:7a:9b:f8:3b:d4:11:e9:0c:92:4c:70:
b2:df:3f:c1:ed:1f:cb:66:f4:96:b0:09:b0:7c:bf:1b:1b:e2:
2c:28:65:bc:9d:fa:99:a2:97:01:c5:86:dc:89:80:9f:c2:6e:
34:2a:04:30:cd:6f:48:5e:4e:fb:a7:74:77:f3:79:1e:1f:e5:
2a:e6:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:11 2025 by rpki-client