Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: MF+QWBlhCqJjneMd/VElADj+DWXq0EC++D7ZD4YQSw0=
Subject key identifier: 2F:FE:1E:B1:97:B7:44:C2:05:39:88:86:E5:F5:54:52:2D:4B:EA:EF
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 0199228CF31E62E5389AE5FF79BDF3173999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:26 +0000
Manifest this update: Sun 07 Sep 2025 05:01:26 +0000
Manifest next update: Mon 08 Sep 2025 05:01:26 +0000
Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: u6joxjcsG4tIhdH06ajnzsSK7oCSb8cY62c4U3XvmI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f3:1e:62:e5:38:9a:e5:ff:79:bd:f3:17:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Sep 7 05:01:26 2025 GMT
Not After : Sep 8 05:01:26 2025 GMT
Subject: CN=2ffe1eb197b744c205398886e5f554522d4beaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:20:e5:96:c0:ca:80:7a:e4:08:58:a8:08:
1d:a2:2f:72:91:be:3d:57:e3:e3:5d:39:8a:ed:65:
24:1a:23:6d:de:98:29:f3:60:21:ec:08:57:2e:b9:
09:3b:d0:70:15:b0:20:2a:c1:08:1a:e0:b0:95:0e:
11:42:ae:34:cb:46:17:ee:5c:76:2c:10:50:79:01:
2c:d7:41:73:0c:5c:dd:d1:05:7f:41:bb:11:58:09:
da:11:5d:25:97:75:a4:ec:70:7c:01:47:7f:c5:c5:
0e:18:f2:d5:dd:ef:8d:34:a1:ee:fc:63:42:32:82:
e6:fa:a1:ce:95:bf:95:16:2c:d6:1b:a4:df:ce:c5:
38:be:04:6b:03:d8:d3:0a:7f:3b:70:0e:f4:82:d8:
c4:80:a7:dd:e8:50:47:c3:40:d7:6e:04:6b:34:50:
14:10:e7:7d:92:da:25:2a:ff:ef:76:85:c8:af:8f:
e4:e7:67:04:3e:77:1d:5c:d1:22:c4:1b:2f:bb:d0:
53:d4:ab:fa:5e:e0:7a:de:9b:7a:0b:8a:96:6f:6d:
bc:bf:3a:49:5f:80:e9:22:d8:07:48:56:2d:bb:be:
a7:35:0b:d7:c7:1f:0d:82:22:ef:3f:a4:67:b6:d9:
ac:77:0e:07:81:bd:15:0d:64:38:6b:c5:56:d5:cb:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:1E:B1:97:B7:44:C2:05:39:88:86:E5:F5:54:52:2D:4B:EA:EF
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:60:39:9a:5e:05:ec:8b:4a:67:4d:8c:24:ea:a5:1d:4e:
f7:7f:e5:cf:e6:39:dd:9c:15:a7:89:d1:83:a5:c1:e9:7a:53:
69:34:44:81:5f:8c:32:02:0a:c9:3a:e0:ca:33:90:66:5c:10:
fe:cf:60:c6:8e:66:b5:cc:31:71:ce:a7:32:19:5e:bf:26:33:
7a:ca:c0:c1:5c:c2:f8:1b:88:a2:26:91:12:b2:5d:d7:3f:38:
a0:5b:d5:93:bb:b7:cf:c4:c7:7b:cb:cc:44:4b:4f:b8:9b:ea:
1b:fb:8a:51:82:d5:4e:b8:51:92:d2:46:20:7a:56:5f:87:64:
77:ab:05:02:6b:8c:12:81:f2:ac:6b:ac:cd:ae:09:17:89:2a:
83:4c:14:72:06:96:0a:44:70:de:61:f9:bf:e7:64:3e:06:88:
7c:15:49:ab:2a:4c:92:5f:20:64:60:dc:61:96:39:08:e8:f2:
a1:e3:9a:30:4a:64:93:ff:3c:fe:2d:65:a1:1d:ad:46:aa:a4:
52:0b:18:3a:ad:27:f4:c3:0d:36:9b:3d:31:d1:41:f9:1a:9f:
d7:96:b6:1c:9f:37:2a:ed:14:32:4d:42:aa:f6:04:25:36:65:
43:6d:02:fb:62:95:2c:73:b8:f2:83:a7:2d:1e:77:67:f9:90:
41:d0:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client