Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier: Vufyrisj+0yJaw/WhqUrSH5/Q+82h8LJ40UaJV5dE1Y=
Subject key identifier: E2:9F:E9:E9:5B:6D:05:3F:57:95:5E:09:F9:69:90:12:C4:82:72:0F
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial: 01991D2F7CAC7CCA2D45ACF2C5AFE79E2716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number: 09CF
Signing time: Sat 06 Sep 2025 04:01:15 +0000
Manifest this update: Sat 06 Sep 2025 04:01:15 +0000
Manifest next update: Sun 07 Sep 2025 04:01:15 +0000
Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: WvjD1MWbeHKRFGTPUUdHqaS28aCdnv8aEMlvY3FOm6Y=)
2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:7c:ac:7c:ca:2d:45:ac:f2:c5:af:e7:9e:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Validity
Not Before: Sep 6 04:01:15 2025 GMT
Not After : Sep 7 04:01:15 2025 GMT
Subject: CN=e29fe9e95b6d053f57955e09f9699012c482720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:3b:00:83:35:94:37:59:ed:9c:de:6a:22:
ba:f7:be:72:9c:a1:49:f3:0f:3f:a7:02:aa:de:07:
5a:04:e5:b6:54:e2:da:d6:00:81:2b:ce:f9:9c:95:
d6:4b:53:85:d0:d8:32:67:59:00:9b:3a:87:bc:99:
45:ea:34:bf:27:af:06:3d:06:10:8c:e3:78:00:b2:
4b:38:44:94:59:81:11:02:52:0b:d4:66:67:bf:7a:
f0:80:ae:49:4a:21:e5:b0:8e:27:3b:27:69:2d:12:
a3:cc:cd:a4:2e:28:95:42:f4:e9:3c:43:48:1d:03:
77:46:b8:a0:74:55:ed:08:b6:8a:c2:a2:00:19:1c:
cd:3e:39:1c:f1:24:45:4c:4a:17:a5:24:1e:e6:6c:
89:5b:d9:81:ff:19:be:e3:34:12:d6:28:e0:08:46:
f1:e3:8f:25:0a:2c:81:e1:8e:e9:f7:05:b2:96:5a:
cf:31:9a:d2:eb:6e:2a:4d:68:0d:6d:35:21:d1:87:
5a:63:92:2e:63:ea:a1:c0:ab:91:a2:0c:b8:db:44:
ec:aa:ba:9d:28:34:95:57:81:7e:8e:cc:da:72:44:
74:17:03:66:85:39:19:d9:9f:72:f8:52:36:8b:59:
65:28:14:7b:d6:20:3e:ff:10:52:7c:f1:26:38:7d:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:E9:E9:5B:6D:05:3F:57:95:5E:09:F9:69:90:12:C4:82:72:0F
X509v3 Authority Key Identifier:
keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:48:52:55:d4:95:e6:21:de:2f:52:8a:d5:11:b4:e6:a6:45:
99:7c:76:59:68:7f:32:b4:84:5c:5a:62:19:a7:08:76:ed:7b:
60:fb:7d:75:57:1e:cb:d6:d6:92:c7:d9:64:1f:ae:c2:05:b2:
b8:63:a9:43:5b:16:38:46:b9:68:91:7c:c4:0c:30:ac:f9:a1:
72:14:58:43:2d:97:27:d0:59:0c:07:26:27:de:29:1e:46:3d:
9f:7d:e2:5f:38:e7:3d:30:da:b5:81:a2:7b:29:26:c8:67:d6:
54:ea:02:7d:c1:65:ea:b0:71:c8:d1:af:6e:1a:cc:ec:52:1d:
e9:dd:dc:06:75:d3:5c:e7:58:20:16:62:37:52:90:72:31:5c:
63:ed:1a:d9:2d:58:85:3c:c1:aa:08:33:3e:ad:4e:ac:d9:6c:
17:45:de:33:0d:08:f1:99:58:77:2d:da:d8:66:0f:ac:34:d5:
8f:e9:41:ab:34:00:f5:89:e2:56:6f:a6:84:97:3c:1b:a6:a8:
97:04:ce:69:4a:92:0c:83:42:d9:45:dc:4a:27:d8:a1:29:ca:
54:fd:2e:e5:f2:c8:39:5e:bc:c5:c4:f6:e9:c1:7d:00:81:46:
ca:a1:78:69:1f:2f:10:43:16:a3:2f:16:9d:09:6a:4f:08:42:
fc:fb:97:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkdL3ysfMotRazyxa/nnicWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzE5ZWM1MTZmMTE1NDBkYTRjNGU3ZTRiN2Y1YjM3N2Q5
ZmQyNWIwHhcNMjUwOTA2MDQwMTE1WhcNMjUwOTA3MDQwMTE1WjAzMTEwLwYDVQQD
EyhlMjlmZTllOTViNmQwNTNmNTc5NTVlMDlmOTY5OTAxMmM0ODI3MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuU7AIM1lDdZ7ZzeaiK6975ynKFJ
8w8/pwKq3gdaBOW2VOLa1gCBK875nJXWS1OF0NgyZ1kAmzqHvJlF6jS/J68GPQYQ
jON4ALJLOESUWYERAlIL1GZnv3rwgK5JSiHlsI4nOydpLRKjzM2kLiiVQvTpPENI
HQN3RrigdFXtCLaKwqIAGRzNPjkc8SRFTEoXpSQe5myJW9mB/xm+4zQS1ijgCEbx
448lCiyB4Y7p9wWyllrPMZrS624qTWgNbTUh0YdaY5IuY+qhwKuRogy420Tsqrqd
KDSVV4F+jszackR0FwNmhTkZ2Z9y+FI2i1llKBR71iA+/xBSfPEmOH1AtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKf6elbbQU/V5VeCflpkBLEgnIPMB8GA1UdIwQY
MBaAFGZxnsUW8RVA2kxOfkt/Wzd9n9JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYt
NTRjMTZiOWNjMTE4LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYtNTRjMTZiOWNjMTE4
LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkhSVdSV
5iHeL1KK1RG05qZFmXx2WWh/MrSEXFpiGacIdu17YPt9dVcey9bWksfZZB+uwgWy
uGOpQ1sWOEa5aJF8xAwwrPmhchRYQy2XJ9BZDAcmJ94pHkY9n33iXzjnPTDatYGi
eykmyGfWVOoCfcFl6rBxyNGvbhrM7FId6d3cBnXTXOdYIBZiN1KQcjFcY+0a2S1Y
hTzBqggzPq1OrNlsF0XeMw0I8ZlYdy3a2GYPrDTVj+lBqzQA9YniVm+mhJc8G6ao
lwTOaUqSDINC2UXcSifYoSnKVP0u5fLIOV68xcT26cF9AIFGyqF4aR8vEEMWoy8W
nQlqTwhC/PuX1g==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:29 2025 by rpki-client