Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: XLHca713w5jLOL4hXYpiLaFaMo2hvkVz7pty3fxcotI=
Subject key identifier: F8:48:FE:45:A4:1E:D5:2E:A1:46:5B:68:FF:7B:DB:38:A0:04:97:16
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 01993EA958FE616F9858EA11D6595CB60ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 11AE
Signing time: Fri 12 Sep 2025 16:01:49 +0000
Manifest this update: Fri 12 Sep 2025 16:01:49 +0000
Manifest next update: Sat 13 Sep 2025 16:01:49 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: reO2QRL2MocjqPrQ+fCQ9u6GIwzAttnQ0zl09gQDYd8=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 15:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:a9:58:fe:61:6f:98:58:ea:11:d6:59:5c:b6:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Sep 12 16:01:49 2025 GMT
Not After : Sep 13 16:01:49 2025 GMT
Subject: CN=f848fe45a41ed52ea1465b68ff7bdb38a0049716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:4c:a6:b1:69:f1:74:b5:db:af:9e:6a:5f:
c7:79:5a:ab:95:09:e8:4d:a2:7f:24:bf:e0:c0:b1:
ef:17:1a:7e:f1:45:e3:98:80:42:85:84:fb:e6:9a:
4e:38:51:21:39:c4:5d:87:2a:39:9b:5f:bd:ff:ba:
a8:6b:2f:36:3f:6d:4c:f3:ba:4f:45:5c:23:86:d7:
23:d7:69:77:97:54:ef:4d:90:92:b6:4f:ec:15:55:
f4:cd:60:e3:a0:70:c8:1b:b8:20:70:37:6b:32:43:
ec:b5:55:e1:f3:33:ba:86:53:a3:b4:b4:58:e9:56:
e9:24:82:29:0a:70:90:95:d6:22:0c:e1:b9:6b:04:
fe:d0:8f:c9:8e:b7:dd:a9:c0:7f:6e:32:4d:fe:f8:
31:fa:21:0b:7c:9f:fe:1d:9a:7b:d1:a3:08:ae:4c:
34:72:8e:2d:9f:e8:94:2b:ee:eb:7e:6d:15:9f:bd:
1e:62:42:0f:0a:cd:51:7c:20:e9:2f:02:2f:3d:af:
ae:ae:ca:6c:95:5d:57:cc:40:82:bb:28:3e:d6:34:
38:67:82:70:d2:85:10:89:a8:17:8a:1f:7e:08:43:
93:a8:05:3c:e2:fe:f6:d9:5e:d4:44:88:fc:b0:45:
51:ce:59:38:17:c8:6e:c5:44:17:83:8f:61:0c:09:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:FE:45:A4:1E:D5:2E:A1:46:5B:68:FF:7B:DB:38:A0:04:97:16
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:23:3f:20:8f:67:15:83:cb:fd:7c:e3:ff:d6:ad:92:a8:89:
f7:d2:d2:97:55:f9:ff:8d:f3:3d:87:71:02:4d:b4:4a:a5:b2:
34:03:4d:e0:51:ed:d4:ae:ff:59:ee:5c:a3:50:d2:b6:16:0e:
35:ed:22:e7:75:34:74:aa:0b:22:79:50:ce:05:54:37:30:46:
1c:c7:b7:56:e7:bf:ba:55:18:90:10:21:58:35:31:49:61:4d:
ab:8a:19:e4:ae:aa:af:6b:29:ff:13:3a:f0:84:94:b7:e8:7b:
ec:94:cf:f1:97:c6:e2:01:79:63:65:62:49:8b:00:13:7b:eb:
86:54:62:78:27:4d:9d:4c:16:ef:df:23:5f:6e:bf:c0:5a:74:
d1:ee:67:f9:b7:9d:37:60:cf:17:76:ab:41:ca:dc:55:e7:7b:
e2:8b:56:73:fb:85:16:9a:d4:79:04:28:09:66:0b:11:f1:e2:
af:7d:0e:7c:e1:44:7d:e8:e1:3a:71:8d:0e:94:30:a6:2a:2f:
fc:99:fc:98:29:e2:13:45:f2:d1:57:39:ff:f0:57:11:1e:e6:
97:65:c2:44:08:f3:c8:f7:9c:4a:ae:70:71:ac:f3:a5:ae:b5:
98:0f:e1:b3:14:45:4d:4f:fa:11:f3:11:ab:ed:8b:80:c3:17:
32:15:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 22:25:39 2025 by rpki-client