Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: /hcBBF5dcRA+mvZaFcoP2qR4g8LrkgDvFKWTd34yFRI=
Subject key identifier: 72:27:39:9B:3E:54:B9:F9:75:58:F9:D9:88:CF:88:C8:59:C2:61:0E
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 0199228CAFEE03243283CAB5CA97BF538CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 0617
Signing time: Sun 07 Sep 2025 05:01:09 +0000
Manifest this update: Sun 07 Sep 2025 05:01:09 +0000
Manifest next update: Mon 08 Sep 2025 05:01:09 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: 7yPMfhPoSGKseVvO0FnveDZFGZHSngttZXPFxC3eVI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:af:ee:03:24:32:83:ca:b5:ca:97:bf:53:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Sep 7 05:01:09 2025 GMT
Not After : Sep 8 05:01:09 2025 GMT
Subject: CN=7227399b3e54b9f97558f9d988cf88c859c2610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:63:36:dd:97:77:26:b7:cc:91:60:64:17:
bd:b2:63:5a:a7:63:18:52:f9:85:da:4a:ef:e6:5d:
e3:17:49:cc:6c:08:39:1e:09:0b:fd:bc:b1:54:d5:
55:db:58:e8:40:3a:96:44:f0:bf:71:04:d5:ad:2b:
b5:1d:1a:33:d4:6f:21:e2:b9:f2:75:69:e0:81:ef:
50:cf:56:57:5f:90:9b:33:97:6e:87:a5:c7:1a:b8:
3c:7c:78:7b:3c:3e:a4:64:1b:a2:3f:f1:d9:25:5e:
92:43:13:4a:f6:26:5f:50:73:5c:f2:3d:dc:3d:a4:
51:f0:fd:a9:6b:68:34:c4:ac:2f:81:24:bf:36:0c:
bf:87:62:3b:ac:22:2a:59:c0:0f:8d:68:a8:7c:76:
0c:67:93:b9:75:46:6f:ea:e4:51:91:66:31:24:9e:
02:45:3c:b7:48:4f:9b:80:ba:84:63:7f:5e:5b:86:
8b:c9:65:79:20:a9:5d:4f:00:53:7c:6f:f7:49:47:
ba:e3:64:d5:ff:d2:0b:bb:02:60:47:68:bd:0b:25:
b1:26:71:b3:18:a7:4d:52:3b:64:35:be:c6:1e:e3:
95:a0:72:37:d5:4b:68:f4:f2:93:ea:ee:16:a7:44:
5c:7a:49:38:ef:3e:ce:44:99:e9:f5:6d:a6:9f:07:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:39:9B:3E:54:B9:F9:75:58:F9:D9:88:CF:88:C8:59:C2:61:0E
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a9:0d:6e:ba:1f:cf:cd:f2:ca:5c:c0:23:a4:cb:fa:18:08:
db:ee:d9:95:e8:ec:39:0f:f7:df:85:ff:84:2c:1c:d0:82:50:
bb:cb:40:8d:49:80:68:bd:01:ad:f8:b6:39:b1:d5:b4:91:9a:
eb:c1:3e:03:96:7b:6c:cb:90:d6:29:d3:e4:24:4f:6b:ef:a3:
df:ca:78:d2:b0:62:2c:0e:18:83:02:a5:05:da:96:c4:9d:46:
72:e3:ab:b9:8a:9a:a2:01:ca:95:15:8e:48:a3:f4:14:92:d8:
3c:c4:6b:df:95:2e:3e:bf:e1:77:c3:52:8f:ea:cc:79:03:84:
a6:97:48:70:47:9d:75:2d:7b:a6:5a:be:66:4e:74:8a:14:b3:
30:63:de:7d:e3:a2:63:20:5b:65:67:7b:c3:8a:7d:c0:0b:c3:
35:5f:a1:46:fb:1a:20:0d:e4:0c:02:e3:0b:17:ed:cb:c5:55:
01:75:fe:66:4c:79:89:ee:ab:1e:41:b5:3c:b9:b7:a6:84:6e:
37:e3:76:60:12:33:81:95:3c:19:c1:57:7a:58:de:6c:cf:ab:
e7:8a:e5:bf:20:95:3f:6d:ae:04:c6:9b:cc:51:e2:9f:79:27:
4d:b8:81:d3:c9:e8:b8:dd:ee:84:b1:c1:25:1b:a6:f5:db:65:
f0:82:fc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:29 2025 by rpki-client