Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: S60KLWL4LK1/lx9LOcYPoB4LuXm0wA29U8MPBo3ccnU=
Subject key identifier: D9:7B:CE:22:C9:74:CF:05:15:BD:F4:81:6B:FE:85:F2:20:9B:1A:CC
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 019929D7CB7C1C0F8FC94FFB9F27A9B1A7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 15:00:32 +0000
Manifest this update: Mon 08 Sep 2025 15:00:32 +0000
Manifest next update: Tue 09 Sep 2025 15:00:32 +0000
Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: kf7OXlNK/BLX7ll5zvkXVZHuMFp3bPwLmnvCKlf40Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 14:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:d7:cb:7c:1c:0f:8f:c9:4f:fb:9f:27:a9:b1:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Sep 8 15:00:32 2025 GMT
Not After : Sep 9 15:00:32 2025 GMT
Subject: CN=d97bce22c974cf0515bdf4816bfe85f2209b1acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:91:09:d2:6a:89:d7:06:04:23:81:f7:bc:
4f:70:8e:2d:03:98:37:d0:97:b2:f0:6a:ec:b3:bf:
79:44:fb:26:30:8d:b3:ac:e4:d2:4e:55:14:87:f2:
da:e0:a0:13:c9:48:91:0b:72:99:e6:aa:b5:30:76:
3a:39:d0:35:ec:5e:46:c3:59:67:64:8c:29:35:86:
e8:68:80:67:2c:bf:e6:64:fc:80:a7:be:0b:e8:1d:
31:3a:2c:a3:b1:2a:5b:29:2b:34:d9:16:91:b1:b0:
62:ef:46:cd:d1:1b:7d:0d:ea:3f:cc:8b:31:d5:7a:
d4:0f:1a:6f:29:b1:84:67:2b:d0:c8:fd:7f:8a:b2:
c1:b5:50:0f:4f:c1:af:ef:77:63:2d:36:61:75:18:
7d:82:70:1f:9c:ad:a2:ff:6d:61:fb:9e:08:f2:94:
c7:d8:98:67:22:ad:3b:58:ce:e3:c4:eb:81:0b:b3:
1d:03:4f:79:bb:1f:f4:3f:52:53:b2:9e:1f:c6:b5:
df:3d:9c:f8:40:ce:c5:80:c8:5c:d0:ba:df:32:fe:
7e:b3:a5:37:4c:1b:98:ae:bd:ef:36:ca:88:a3:d4:
75:b4:34:8e:45:93:4b:c8:5b:46:40:52:01:6d:70:
4b:69:90:36:b3:78:96:b0:c9:0c:59:75:b6:3d:62:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:CE:22:C9:74:CF:05:15:BD:F4:81:6B:FE:85:F2:20:9B:1A:CC
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:ce:4e:68:70:df:f0:04:15:41:fb:96:15:52:76:4c:bb:
9b:0e:9b:ff:e1:3a:1a:16:c1:e8:70:b5:fb:ec:0c:ce:7c:d7:
21:81:a1:aa:10:bb:c5:e0:8a:fb:8b:2c:32:10:49:0b:44:36:
30:74:30:de:c9:00:23:1e:e4:aa:dd:c0:07:d7:8b:aa:5f:89:
4e:a0:b2:62:a4:7d:73:62:70:d3:a5:ef:8b:10:9a:96:68:06:
38:a7:a9:76:de:1e:76:70:69:79:3e:fe:f8:d5:b8:26:8a:56:
27:e8:08:4a:45:33:62:9e:0d:36:3e:19:65:b4:3c:8c:10:47:
bf:c3:4e:77:99:ef:0b:9f:13:2a:42:59:c8:b5:e4:5e:f9:c3:
fd:9f:bc:fd:59:64:86:ba:c5:e6:86:0d:58:18:14:02:06:f3:
24:f5:9b:53:55:5c:e9:69:d2:0a:ba:60:ea:4c:9d:28:d0:68:
2e:eb:a8:6c:4e:07:ba:d7:d3:4b:90:a4:cc:98:5f:9a:b9:e3:
a0:f5:a5:36:55:7e:6f:e2:64:e4:8f:1e:66:a2:7a:6d:eb:05:
f4:82:91:d1:2b:25:3c:90:bc:14:d5:9a:0f:d2:74:18:bf:2f:
33:bf:58:62:74:b2:f2:6f:43:b8:e4:21:9b:e0:72:ba:0a:61:
19:e1:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:17:31 2025 by rpki-client