Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: DbzuEhTfgLEHYQxaH4wFUzLRf1julb/PGnqAcjFRMpk=
Subject key identifier: B2:85:B7:49:5F:94:F9:8E:4E:B3:BF:E4:37:0E:0F:F9:2A:FB:F9:27
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 0199239F74F406DEFDF96C4E907597FD7D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:16 +0000
Manifest this update: Sun 07 Sep 2025 10:01:16 +0000
Manifest next update: Mon 08 Sep 2025 10:01:16 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: hYcK4aTPNSzI6lJELEdwkDGPerwCGl3m1sv1051jjGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:74:f4:06:de:fd:f9:6c:4e:90:75:97:fd:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Sep 7 10:01:16 2025 GMT
Not After : Sep 8 10:01:16 2025 GMT
Subject: CN=b285b7495f94f98e4eb3bfe4370e0ff92afbf927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:6e:43:2f:f3:37:b6:67:1e:87:5a:aa:23:
b4:55:21:af:7b:a8:fb:98:fd:37:8b:f9:1e:4c:a0:
62:b9:1a:e3:44:9b:f4:de:ec:99:b1:81:4f:ed:cc:
a5:5f:1a:7b:08:47:d7:2e:6d:fe:60:1b:21:75:af:
27:da:62:f6:40:1d:d6:f0:da:79:91:3a:09:01:90:
fe:9d:9a:bd:71:92:1b:d6:cb:e9:d7:c7:90:02:11:
c4:02:53:1e:9b:64:d6:89:71:69:f5:0c:d0:fa:e5:
af:f3:5f:06:3d:2b:2a:15:48:ac:c5:53:ab:fc:72:
b6:37:01:85:18:8e:db:0f:27:ea:ed:83:eb:c8:3f:
f6:5c:f8:f9:a5:72:60:cb:3b:19:84:03:7b:31:9a:
94:7a:3a:aa:b0:4f:dd:0d:32:c0:97:a5:4f:6b:9b:
4e:b2:e3:43:6a:45:41:f0:98:9d:df:5e:64:4b:ec:
17:fd:28:7d:65:5a:e9:b8:bd:bd:70:d5:16:a7:24:
83:60:63:72:93:10:88:c4:1c:65:f6:6c:96:0b:73:
90:3e:23:36:90:2c:49:a7:50:a4:5d:58:26:b3:e6:
7f:af:c4:e7:eb:13:0e:b4:69:7c:c2:52:80:8d:64:
83:9e:f6:86:ef:7b:11:1d:78:b7:12:e8:b6:80:16:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:85:B7:49:5F:94:F9:8E:4E:B3:BF:E4:37:0E:0F:F9:2A:FB:F9:27
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0d:e9:1a:e2:c3:f0:9f:ef:dd:03:db:62:f5:0f:e7:ee:fc:
a3:41:72:64:cb:64:7d:46:e7:1e:d8:4b:d1:88:75:7c:f4:b7:
d9:ea:96:f2:b5:98:a9:a8:f7:12:46:5c:86:af:9f:35:fe:74:
a3:00:f2:0b:b8:09:c1:e9:eb:58:aa:ae:8d:c0:c8:81:6d:0d:
9d:09:34:11:38:ac:27:44:d5:19:0b:0a:fe:2f:1b:e2:56:ed:
03:68:61:b6:8f:0e:70:53:b6:d9:02:98:59:e2:a3:19:c7:7b:
c5:7b:82:5d:a5:64:08:ae:82:68:0b:84:bf:1f:58:0b:f8:fe:
6f:95:fe:9a:ed:ed:c2:05:a1:45:fb:57:20:b8:cf:61:e0:9f:
45:92:da:bc:e1:36:a3:4c:8d:f3:a3:32:b7:01:66:9a:e6:ad:
13:52:72:58:7f:56:67:be:ad:7b:c0:7c:ee:e7:18:b0:4f:bf:
24:e3:96:13:da:b9:7b:cc:80:e9:83:d4:1a:7e:23:c2:58:e6:
51:c9:10:9f:bb:98:ff:d6:7c:df:ba:c3:5e:f3:9d:5e:cd:a8:
95:bb:ca:7e:dd:99:0f:b3:f4:ca:3a:ee:b8:d2:f6:be:fa:83:
ba:1c:70:44:1a:1c:72:b0:5f:92:26:2c:79:1b:30:7d:08:f2:
ee:0f:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:35 2025 by rpki-client