Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: mIQZPhZ4Pxz6w2NPdq/ni0bGZLWPlbnUdyIVxC7oXzM=
Subject key identifier: 0D:EB:BD:D8:32:19:E9:EB:98:56:19:E8:7F:64:98:B7:06:50:6D:CC
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01992D47351A968BB0B96C906C8F248A70C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1609
Signing time: Tue 09 Sep 2025 07:01:05 +0000
Manifest this update: Tue 09 Sep 2025 07:01:05 +0000
Manifest next update: Wed 10 Sep 2025 07:01:05 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: XXhVM+601ecZewkRu6fV3DjqwJCA5ofX2BW4v7gZ1zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:35:1a:96:8b:b0:b9:6c:90:6c:8f:24:8a:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Sep 9 07:01:05 2025 GMT
Not After : Sep 10 07:01:05 2025 GMT
Subject: CN=0debbdd83219e9eb985619e87f6498b706506dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:eb:ad:ef:3d:6a:10:bb:c1:a5:fe:bf:fc:
81:32:75:3a:9a:d1:5f:e9:86:c7:f0:bf:55:71:e4:
c5:5c:a7:77:17:d4:e7:92:e9:3c:6e:78:97:78:c6:
20:00:73:18:24:ea:41:ec:e5:51:7d:96:99:16:e2:
92:aa:e6:f5:99:e5:4a:4e:b6:cf:b1:ed:66:ab:e0:
d2:a9:0b:54:0b:11:b7:f3:7c:0f:8c:d3:44:60:c9:
94:ca:e6:0e:35:5d:15:e0:7f:a6:fb:ff:40:e2:8e:
f9:53:aa:0a:ae:8c:b2:4e:44:fa:72:f0:60:52:9d:
fb:0f:ed:63:7b:62:78:c8:dd:a6:1f:6f:88:12:c1:
d1:65:84:b0:a3:9c:cc:9d:04:78:30:a9:68:85:dc:
9c:d4:38:d1:2c:42:c0:e8:1f:ba:bc:d9:0d:55:1c:
4f:5d:4d:14:e0:25:74:c8:3c:bf:51:d2:81:ef:08:
5c:bc:15:1a:96:98:ef:cb:29:a5:fc:a4:46:fa:3f:
c2:42:22:b1:e0:48:9f:38:8e:23:5a:c4:24:6f:fe:
58:47:d7:65:b9:09:65:1c:d9:df:f5:84:46:3b:37:
0f:89:16:39:c7:36:d6:6d:b6:11:c2:59:98:4f:ed:
7b:0e:d5:a6:fc:4a:31:73:11:47:1d:c0:f6:d6:e5:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:BD:D8:32:19:E9:EB:98:56:19:E8:7F:64:98:B7:06:50:6D:CC
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c8:3f:5a:17:d8:8b:e2:0e:96:fa:a3:9d:b6:2a:70:80:03:
fc:e4:f6:0f:55:36:01:5e:51:00:bc:16:b1:d2:67:b9:41:b8:
0f:b1:7e:45:d3:f1:2d:f0:8c:16:b1:7a:f8:42:95:17:24:bb:
7f:9c:df:dc:51:c0:18:7b:95:18:ea:f1:78:a6:74:a6:58:45:
fb:df:e8:68:11:9b:bf:b0:86:d3:2d:5e:1a:32:13:4b:c1:db:
3b:4b:53:4f:cd:05:4f:0d:a1:e4:64:5b:88:83:35:d4:eb:2a:
a0:b0:3e:8f:8c:4e:3b:8c:d8:94:ae:9c:e9:6c:e4:df:51:c7:
59:77:ff:18:aa:c5:3a:53:98:88:13:da:42:f9:7b:e8:18:cf:
ac:ea:df:cc:a9:05:66:08:89:e3:66:58:f6:e2:1f:78:62:00:
a8:15:15:37:67:64:b4:08:25:61:b3:ed:e4:e3:ad:79:34:bb:
5f:4e:9d:85:bb:52:33:ea:d0:b0:66:7d:9b:d3:9b:ba:4d:18:
66:71:c3:aa:63:e0:57:c5:4c:d6:43:2e:3b:20:38:49:d3:39:
d3:e2:5b:69:7c:fb:34:02:80:6b:3d:1c:0b:fa:c2:72:91:96:
dd:07:61:73:0e:a2:c1:11:21:54:68:0c:6e:2c:7e:c0:b9:46:
f5:f7:cf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:05:31 2025 by rpki-client