Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: bHe2koB8OsqVy4bPLxhJch7tNSwQAnOI7UHDyyKx0aA=
Subject key identifier: 94:34:05:7D:1C:83:A4:77:A8:5C:CA:9B:B2:13:FF:14:D7:B3:CB:0A
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 01993612F203808580273B2E87EBAB8BDA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1683
Signing time: Thu 11 Sep 2025 00:00:35 +0000
Manifest this update: Thu 11 Sep 2025 00:00:35 +0000
Manifest next update: Fri 12 Sep 2025 00:00:35 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: qiedL3dFM/eJFbGtf7OzuK6K4lhIHblwS9ThvCRHq1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:f2:03:80:85:80:27:3b:2e:87:eb:ab:8b:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Sep 11 00:00:35 2025 GMT
Not After : Sep 12 00:00:35 2025 GMT
Subject: CN=9434057d1c83a477a85cca9bb213ff14d7b3cb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:0b:e2:b0:ae:e0:8a:ff:3d:e8:1f:d7:c2:
46:8e:da:43:51:40:92:78:31:cf:d1:b1:40:61:f9:
3b:1b:f1:77:a7:f2:83:4e:9f:f6:1b:38:37:ed:46:
92:b8:c2:c7:ff:67:62:61:26:6a:b0:09:94:b4:ae:
f4:c9:25:51:2d:1d:c3:ef:af:79:e9:1e:00:57:64:
dd:31:09:4e:8a:4b:fe:54:45:eb:52:b2:7c:95:6a:
b0:de:a0:80:bf:2c:5b:73:84:ce:8b:4a:ae:47:64:
16:33:20:5b:56:ff:1a:13:c6:d3:46:07:1a:cb:ea:
13:98:32:29:5a:4a:7d:4c:15:b7:5f:5e:a1:16:e9:
a1:01:c1:c8:bf:3f:b4:42:cf:c7:cb:2e:e4:7d:40:
1b:0e:dd:7e:59:4a:d8:b7:3a:3a:77:3f:3c:36:8e:
65:3e:c6:7e:7f:ca:57:62:7f:5b:6e:2e:be:66:1a:
69:d1:5a:bd:23:c5:8a:7f:25:66:95:c5:33:53:d5:
35:c6:bc:bb:e0:fe:c8:18:4d:0a:32:44:d7:d0:e5:
07:b1:79:19:e1:89:0f:9c:4d:bf:5d:b1:ef:78:6c:
cf:aa:f0:cb:66:43:72:a1:60:c6:f0:c5:34:50:56:
0b:81:e6:63:42:2f:1d:04:da:90:fa:6b:b2:ed:03:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:05:7D:1C:83:A4:77:A8:5C:CA:9B:B2:13:FF:14:D7:B3:CB:0A
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:2e:87:2d:e1:cd:08:e3:7f:ef:0c:85:5e:c2:9c:98:fa:
de:6e:f3:de:5e:94:57:35:96:95:ce:89:0b:4c:20:bb:ac:d2:
d5:21:b2:a9:e9:f2:1d:86:93:de:8a:e2:0b:e5:f2:d0:70:8e:
58:31:06:e2:f0:5b:a0:bb:b3:85:f6:61:28:aa:c8:0e:55:b1:
25:56:65:c0:96:b0:58:0b:65:ea:dd:51:2a:b9:64:b1:71:02:
c6:94:ac:db:37:59:74:26:df:bc:85:00:e8:ef:a5:bf:d5:f6:
cf:04:4c:1c:c1:a1:89:c8:7c:6a:20:9a:50:e2:c4:40:8f:b3:
fe:a5:f7:03:78:f7:d0:15:24:61:f5:d8:17:d8:08:96:7d:aa:
4a:0e:48:85:f5:1d:7e:7a:de:ab:d9:97:9c:f5:6a:a7:d5:e4:
a0:73:99:a2:bc:10:07:82:b7:72:98:97:48:03:e9:ac:e9:84:
00:c0:d1:dc:17:70:b8:83:96:3f:1c:5a:dd:98:8b:bc:e2:81:
4d:82:9d:42:f5:8c:5f:79:b9:d7:35:43:c9:4b:23:55:83:ab:
19:e6:f2:ec:dc:70:bb:d9:50:ea:86:69:7e:b1:53:3b:e1:2a:
4c:8a:4b:db:4e:3c:05:b2:69:68:a9:4c:b6:76:48:80:cc:af:
c3:ea:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:30:25 2025 by rpki-client