Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json)
Hash identifier: X1KUi6F0mk11gKaoqAalFRveYNVzgk7MmJSU4yYXpAA=
Subject key identifier: D2:CB:A3:94:2E:4E:84:19:1D:97:D6:40:18:BF:86:A0:89:42:C8:38
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 0199240CBE90E24425838EEF7D24C7E50C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
Manifest number: 0865
Signing time: Sun 07 Sep 2025 12:00:38 +0000
Manifest this update: Sun 07 Sep 2025 12:00:38 +0000
Manifest next update: Mon 08 Sep 2025 12:00:38 +0000
Files and hashes: 1: HJqh9LPhNU96BEOoiCFDiOzAQPY.roa (hash: Kn8EOpw3bBi0iQXW8fO4Sjg58AKy7QrqKxqXj68ts98=)
2: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: pvtLDUByeWcB/VRqRUdcLmBPq/dEnVQHytptrfBmpJk=)
3: iDHFx2Zwy-f_IDJH8ymgCbum6nA.roa (hash: BRwzpnb5uRZBZyO/g9hikbLOanVTPu4OHJMhQpM40Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:be:90:e2:44:25:83:8e:ef:7d:24:c7:e5:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Sep 7 12:00:38 2025 GMT
Not After : Sep 8 12:00:38 2025 GMT
Subject: CN=d2cba3942e4e84191d97d64018bf86a08942c838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:8b:ce:25:31:ea:40:70:61:ab:be:75:0b:
d7:73:35:c0:a0:49:fe:e0:cc:fe:22:8c:0f:68:83:
4a:2a:b1:57:f4:ab:18:a0:bc:41:8c:47:32:8f:84:
4d:90:ff:3e:57:9e:16:cb:93:54:f5:11:ed:88:bf:
ce:6d:e5:97:52:6d:ce:b7:22:0e:0a:12:2f:f5:23:
c9:1c:7f:4a:b0:0a:b7:a8:16:2d:75:3a:7d:7e:6c:
6f:5c:49:29:e4:e4:70:f2:17:6f:d7:89:76:d2:01:
35:a0:91:e6:bb:e6:f5:89:d1:53:bf:fe:f2:fb:9a:
80:db:78:8c:46:d9:d3:0f:56:85:8c:cc:fa:d7:e0:
2e:15:d9:e9:42:ca:ba:8b:fa:f5:fe:b6:d7:49:de:
1e:2e:0b:58:78:11:7d:19:3b:84:7a:2b:2d:f1:13:
79:83:7c:4c:9b:28:36:91:66:5d:6a:06:09:35:33:
5c:fb:04:06:e9:24:e4:a9:e3:b5:eb:92:f7:70:35:
5e:7c:5f:53:b1:59:bb:91:77:c6:bc:9c:ef:32:e5:
38:5e:2f:9f:37:ae:cb:54:7a:d8:fd:49:59:f6:51:
9b:bb:5d:5a:28:04:40:2f:45:6b:26:3d:75:74:d5:
04:b2:52:84:e1:32:39:36:cf:bb:1f:8f:23:2e:ac:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:A3:94:2E:4E:84:19:1D:97:D6:40:18:BF:86:A0:89:42:C8:38
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:27:04:6e:9d:da:e0:1f:ac:0d:ab:ed:f3:32:1d:d0:07:03:
35:2e:53:3e:53:0a:02:98:47:af:5e:2f:64:3a:0a:c5:74:4e:
e3:09:b8:2e:13:af:5a:0e:33:3f:94:79:d6:33:3e:fc:1c:d7:
13:a7:4f:9f:9a:d2:d5:7b:0a:4c:e6:90:a0:bb:e1:97:ba:b6:
77:ba:c8:1b:ae:8f:8e:39:f8:ad:36:ed:71:a7:1c:d8:1a:42:
01:fd:ff:96:9d:94:6c:04:99:b7:48:b9:c4:0a:8d:b1:b0:2f:
75:4f:02:9e:c7:eb:8b:f9:66:72:89:03:70:ff:b6:49:cb:fe:
59:eb:87:c9:88:47:7d:9d:89:84:05:ab:dc:89:d6:e0:47:b1:
ad:51:39:4e:70:29:3e:17:76:2f:b6:48:25:5c:93:88:a4:40:
d4:e7:a6:7b:1c:f4:10:09:3d:3f:df:04:e2:ea:f7:e8:d9:6b:
8b:a4:ef:6b:67:f9:cd:4e:21:0d:9f:b5:2c:ba:24:69:f8:18:
34:c1:92:1d:4e:be:2e:16:0e:d1:dc:3f:5a:65:c2:ac:b7:c6:
52:72:64:2e:f8:3b:d3:2a:03:87:9d:bf:b3:3e:b6:18:de:64:
17:9d:b3:fe:54:49:5b:66:4c:db:c2:50:71:a6:5c:76:da:0a:
ee:b1:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:37 2025 by rpki-client