Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: 5CmCyHL7Mto1EPhzVAlpD2+H4cHTD6Kq7sCL6lvHR0c=
Subject key identifier: 60:5C:E1:CA:95:03:7F:3A:DF:2F:41:11:2E:4E:9D:F9:9F:16:C1:FD
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0199269FC616EA40AF46A9A1EA1463D31546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 0466
Signing time: Mon 08 Sep 2025 00:00:29 +0000
Manifest this update: Mon 08 Sep 2025 00:00:29 +0000
Manifest next update: Tue 09 Sep 2025 00:00:29 +0000
Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: 2lX95OXRGmfRVn504fAa72mkIqtTY7+O2R7DMSoAdcU=)
2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=)
3: ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa (hash: zK0y4Hfa+Cd7i8O+iE+DO6cd+9VnESfA1kHZCk8+iwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:9f:c6:16:ea:40:af:46:a9:a1:ea:14:63:d3:15:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Sep 8 00:00:29 2025 GMT
Not After : Sep 9 00:00:29 2025 GMT
Subject: CN=605ce1ca95037f3adf2f41112e4e9df99f16c1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:a0:38:05:9f:0f:33:c8:56:d7:12:ad:1d:
27:3a:50:60:2b:55:a2:15:19:ca:91:2c:1c:df:ce:
e1:7c:ea:9a:8a:38:e2:3a:15:af:c4:eb:6a:f4:4d:
7b:01:38:63:90:3c:33:9a:ec:ca:a0:42:6c:da:d4:
b7:84:e9:cd:27:69:b2:9d:76:f2:0d:a2:bc:86:95:
0e:57:7a:6b:3f:ff:d5:27:0b:18:ac:da:97:fb:d8:
12:bf:03:35:32:88:bc:c1:c2:4c:0d:3d:ab:7d:57:
c8:a7:f7:7c:32:06:a3:41:81:41:43:69:89:82:b7:
9e:09:65:3e:2f:2f:6c:df:e1:7f:bc:c2:07:ea:71:
17:2f:d4:a1:3c:03:ef:e2:6c:fb:b5:38:cf:5e:b4:
03:de:f6:83:96:5f:91:c5:0f:2f:1f:81:99:c6:00:
d0:65:e3:86:b3:c5:86:fa:59:4c:21:30:9b:57:f4:
c5:c3:55:81:15:fb:49:70:04:d6:ba:ac:7f:67:9c:
7b:78:61:92:cf:f2:da:03:05:df:09:32:95:ec:21:
6d:e7:28:a8:9e:c9:01:01:7f:94:00:41:96:c4:57:
fc:11:31:62:f6:50:46:90:6e:11:a3:ec:d9:7b:77:
53:ca:e2:bd:06:b9:b3:90:d0:a2:fe:a4:04:9b:28:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:E1:CA:95:03:7F:3A:DF:2F:41:11:2E:4E:9D:F9:9F:16:C1:FD
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1a:34:32:79:f5:b1:fc:e4:50:79:55:5b:dc:d2:57:fd:25:
09:2f:f4:05:11:3a:dd:f2:66:9d:df:93:62:bd:9f:6c:a5:9f:
30:5c:e9:d3:16:42:aa:cb:9a:e8:0f:1c:61:bf:94:21:c4:f5:
cd:22:b3:b4:15:85:39:03:3c:0c:b6:04:48:ff:5b:64:01:a4:
30:d4:db:74:34:aa:29:17:62:a8:98:73:93:1a:3a:1b:cd:c1:
4c:f1:db:95:33:5d:5b:9d:20:8a:1d:5e:35:00:57:10:e3:50:
e2:a3:54:d6:03:b7:54:48:11:5c:21:25:b1:52:db:6b:a8:93:
56:98:a4:64:ac:6b:96:33:1e:91:3b:72:75:35:78:64:12:c5:
a1:31:2f:55:d8:22:5f:e2:fd:74:28:e2:59:86:bc:a9:ce:79:
5b:9a:e1:f5:26:05:2a:00:1a:ad:63:54:72:7f:0d:6f:7d:8c:
a8:49:4c:dc:9c:02:48:9e:5f:f6:52:4c:ab:d2:01:41:e4:19:
57:d5:3f:3f:47:68:c6:57:c2:66:56:95:ad:17:aa:1f:ed:db:
67:3e:8b:bf:2f:8d:99:70:5a:40:ae:2e:e1:d7:81:f4:02:a2:
f6:6d:97:01:dd:1b:e4:1b:11:27:7b:32:86:e5:0b:da:8c:a6:
d6:66:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:43:36 2025 by rpki-client