Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: D6oszvmlEuv7aexEU9To992kj8hEZ2XsRiTzh6mp+Wg=
Subject key identifier: 77:87:C0:FD:84:29:A2:1D:AB:09:3E:EE:8E:5B:E9:4F:DD:60:AD:9F
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 01991687E19425B6E839C6C3E34938DC5DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0DA2
Signing time: Thu 04 Sep 2025 21:00:27 +0000
Manifest this update: Thu 04 Sep 2025 21:00:27 +0000
Manifest next update: Fri 05 Sep 2025 21:00:27 +0000
Files and hashes: 1: 3vOkms1tZ1ngilXRsF2AnSNXRpc.roa (hash: /PiOxJIXqSLan9pb27DlpE7/naqh5TR5sTdBHisw3+w=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: lDuQe1WrjRf03+afUMF5S9EBYksOnsvQT1ZcTRluBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:87:e1:94:25:b6:e8:39:c6:c3:e3:49:38:dc:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Sep 4 21:00:27 2025 GMT
Not After : Sep 5 21:00:27 2025 GMT
Subject: CN=7787c0fd8429a21dab093eee8e5be94fdd60ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:35:b8:8e:bc:f5:d7:88:90:c0:dc:1f:40:
9a:b6:e9:92:13:22:49:ce:be:b3:d4:85:d5:89:c3:
5e:ea:48:c3:23:f0:90:b6:09:e7:22:c5:9e:7d:95:
ea:4c:38:f1:a4:db:f9:56:e1:78:09:0e:f6:40:e0:
2a:6e:b9:00:e7:9f:49:ca:f7:f9:dd:ac:6e:c7:5c:
e2:75:f7:e5:54:8b:6c:7a:55:8f:51:14:cb:12:27:
cd:31:a7:89:02:9a:70:5c:8f:0d:e8:06:59:e4:bd:
70:66:43:f4:4c:60:03:f7:ee:63:e4:63:4a:bc:76:
55:92:d2:23:40:e9:a7:ba:ae:0b:78:5c:39:66:94:
39:0f:4c:5f:b5:89:21:27:a3:d6:3b:3b:b2:34:9a:
ba:f4:0b:ab:1e:1f:88:41:10:48:c7:88:8d:5d:13:
23:58:9d:44:3e:2f:87:2b:98:42:5c:b2:ec:08:48:
bb:52:d9:4a:6b:ad:58:8e:83:7b:5f:57:98:d6:db:
0c:df:a3:5d:35:11:e7:97:f9:72:e8:9c:98:88:b8:
8f:13:d8:1d:cd:23:09:b5:39:80:af:7e:4c:b0:73:
40:ea:e4:f5:c8:95:00:ba:3f:fd:f7:be:cb:99:70:
47:9b:72:a2:3a:e4:80:4b:d0:d1:be:cd:d3:57:2a:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:C0:FD:84:29:A2:1D:AB:09:3E:EE:8E:5B:E9:4F:DD:60:AD:9F
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1f:6b:4e:d9:b9:75:24:17:5c:fd:f8:c1:3b:0c:0d:ff:d6:
b9:36:82:08:f1:82:1a:db:db:08:7a:b6:c9:6d:cd:9c:b3:15:
41:ff:f7:18:0b:84:fc:b2:7f:b7:89:8d:32:58:2c:7d:7e:14:
ca:4f:4d:17:91:18:b8:8b:0a:f1:dc:cf:81:8b:f6:41:29:5f:
ce:97:bc:08:d8:33:d3:19:35:2f:aa:c5:1c:05:ab:3e:2d:9e:
82:73:ff:36:7f:08:6a:b7:e6:2f:3c:8b:17:e9:0d:b7:8e:5c:
33:3b:72:bc:97:79:49:fe:fc:c3:9c:e5:8a:9e:b0:1d:bb:ca:
36:24:61:61:44:4d:c1:77:36:a5:f3:8b:bd:1d:41:d5:0d:d3:
2a:46:71:d9:e0:ab:44:fd:18:68:ab:79:79:82:1a:54:6b:7e:
32:b7:01:33:2c:eb:b9:e5:27:6a:76:71:c6:f1:67:84:f4:4e:
ef:77:ed:b9:d7:1f:6e:55:4b:1c:0a:00:65:6b:ea:fe:17:79:
2b:ed:a7:79:f1:b2:1c:67:b0:9a:2e:bc:08:08:83:86:12:f4:
64:71:16:01:73:46:12:4a:4b:cf:4a:09:3e:21:b4:27:fa:a9:
48:ee:ff:ab:2f:ba:dd:61:ac:5e:c3:3f:eb:f3:95:c7:55:9c:
87:fd:e0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:10 2025 by rpki-client