Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: PaUMJlxzV9sZsrJu2dFRkj+AjSq1nfXt7qVFO5u7pt4=
Subject key identifier: 39:CA:60:92:AE:F4:28:EC:6F:58:3C:9D:61:A2:39:7D:72:57:5C:E6
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 0199315AEB7D51F8603CFEF5BAC1D10C4C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 02:01:05 +0000
Manifest this update: Wed 10 Sep 2025 02:01:05 +0000
Manifest next update: Thu 11 Sep 2025 02:01:05 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: RIpWNshNYH1hFlpt0onJVSckINnmzwwqFK265AX2vSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:eb:7d:51:f8:60:3c:fe:f5:ba:c1:d1:0c:4c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Sep 10 02:01:05 2025 GMT
Not After : Sep 11 02:01:05 2025 GMT
Subject: CN=39ca6092aef428ec6f583c9d61a2397d72575ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:be:ae:f7:01:9a:6a:a0:77:26:29:83:c8:
66:de:27:b4:57:22:67:5d:6e:8a:39:15:2b:b3:1f:
19:df:d3:bd:54:53:ea:ca:9f:f1:20:cc:c2:b8:1a:
73:a5:c3:34:8e:dd:c1:ba:29:02:ee:70:5e:c0:2d:
00:3a:8a:62:62:c9:f9:72:8c:0a:dd:c4:e8:db:4f:
cb:c6:bb:4e:7e:35:23:79:40:19:04:13:77:08:71:
6c:ad:e0:27:88:e9:c7:33:89:b2:04:9d:26:19:a6:
a8:2b:90:32:f5:fc:da:bc:26:32:47:42:77:a6:69:
7d:cc:2d:3b:5b:34:b5:16:f0:69:89:a9:8d:4d:ba:
06:ba:87:95:20:d6:ef:fc:cc:e1:79:95:e8:3d:96:
69:0c:b8:89:1e:ce:8e:7a:d5:22:c4:e7:a6:82:8f:
a0:72:b5:b8:aa:01:88:05:85:0c:5f:dd:39:d0:8f:
07:a6:a8:0b:81:c3:5c:6e:fa:0c:94:f0:17:66:98:
06:7b:18:70:1b:b2:0a:e6:1d:db:57:c4:c0:00:83:
44:11:70:83:10:0c:a0:c2:ff:d5:a5:74:a6:f3:f3:
f9:4e:d9:93:0e:42:95:7b:c4:37:f6:10:3d:61:18:
45:01:43:64:40:68:81:3e:4a:23:e1:80:da:bf:df:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:60:92:AE:F4:28:EC:6F:58:3C:9D:61:A2:39:7D:72:57:5C:E6
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:8a:c6:43:1c:7f:a0:77:cf:7c:51:bf:07:45:20:95:cb:
d7:2f:4c:9f:a7:b0:75:c2:e4:75:3a:4a:ee:b1:8a:cb:b5:d4:
fd:69:24:37:38:c6:5b:3a:a1:ca:10:b5:55:5f:41:22:9d:2b:
b8:1a:37:e3:e7:50:14:b7:d6:f5:df:53:02:b8:88:8d:b7:4a:
b2:8c:1d:2a:9a:57:fa:f5:8a:4b:89:23:fa:66:90:f9:05:c4:
37:e6:1c:1d:60:cd:9c:8b:d0:c6:57:0e:88:a5:39:2a:fc:fc:
51:29:33:84:8a:9b:e0:8a:8e:fa:ce:68:e9:e2:08:94:bc:1c:
3b:8e:81:b2:06:8f:d9:98:cd:79:9c:9f:07:28:70:45:88:5c:
4a:96:a6:1c:aa:2d:c3:97:4c:ce:d0:28:cf:e2:e6:cf:dc:55:
21:3c:ef:cc:1f:0c:67:32:69:6e:14:00:03:81:d6:35:50:c0:
67:64:41:90:8c:77:a4:d2:8c:7a:61:18:40:d3:d0:82:7f:02:
4f:11:50:ea:9d:13:fa:ca:d2:b1:8b:50:21:50:53:22:dd:e2:
39:ba:71:cf:58:28:40:13:36:0a:13:29:ff:ea:3e:50:9f:1f:
92:0c:0e:8a:26:08:3e:81:4c:82:50:e9:ae:47:e3:54:04:bb:
ed:99:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:35:18 2025 by rpki-client