Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: h3OAy6h/kX5l0s2OMEty0MS1PbnOykuXPHlhpUmBbUc=
Subject key identifier: 41:25:E3:2D:C9:53:F1:93:A3:20:1E:56:16:A4:65:5B:52:93:33:48
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01993236B6BAAF8ED87EE69967B19050F74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0BC4
Signing time: Wed 10 Sep 2025 06:01:10 +0000
Manifest this update: Wed 10 Sep 2025 06:01:10 +0000
Manifest next update: Thu 11 Sep 2025 06:01:10 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: PKsoccjUJcKx2MRKnGogtADg7weu7uuxADpPjW0Wli4=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:b6:ba:af:8e:d8:7e:e6:99:67:b1:90:50:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Sep 10 06:01:10 2025 GMT
Not After : Sep 11 06:01:10 2025 GMT
Subject: CN=4125e32dc953f193a3201e5616a4655b52933348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:ec:38:33:53:77:f7:e1:f6:46:c3:b8:b7:
48:96:d5:5e:bc:3e:ce:e1:df:f0:1b:11:20:7d:2f:
a1:9b:58:51:c9:f3:44:e5:6d:b1:13:ed:8a:7d:c7:
a0:3a:13:29:21:cb:f4:1d:d0:dc:d6:2f:7b:58:c5:
10:33:66:ab:16:93:81:c1:24:16:2e:80:dc:42:6e:
b8:30:f7:2a:c7:e8:73:96:18:3e:4f:b5:16:6a:7f:
d4:34:b9:cd:46:a8:b1:e2:bf:13:43:e3:27:55:b6:
0a:48:99:11:7d:f9:63:42:c1:d2:e2:e2:61:f5:0c:
4d:06:7c:58:b8:a1:6c:25:47:ce:64:bf:08:c0:e3:
6f:09:53:10:54:45:72:a9:48:9c:27:38:28:bc:72:
d5:45:ec:f4:13:24:e2:39:b1:8a:ae:88:1c:27:52:
89:f4:45:a9:92:dc:a2:4c:1d:ba:21:94:ab:bd:64:
4f:f7:00:70:a4:fe:24:12:ba:d3:90:8e:88:14:49:
df:4b:c8:32:5d:44:82:f8:54:aa:8c:3e:87:95:87:
42:6d:ac:87:7f:be:75:ba:c1:ab:ee:18:13:2b:ee:
83:d9:8a:d8:18:3a:73:b7:3b:ae:73:aa:ad:7c:7f:
f3:c9:97:1c:f9:0a:7d:ca:20:78:ae:d3:72:0d:51:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:E3:2D:C9:53:F1:93:A3:20:1E:56:16:A4:65:5B:52:93:33:48
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:39:3d:f6:53:2b:ae:e2:4b:f9:a8:da:7d:ea:32:8e:4a:
c0:9c:c7:9b:36:67:91:c7:18:48:71:86:ba:8e:19:5d:23:ca:
67:a3:55:54:19:f9:64:1f:8c:97:37:2a:80:fb:c6:3e:55:1b:
c6:ca:34:29:f5:24:fc:79:b8:7a:32:16:a3:6a:6f:39:c7:90:
ea:e7:5a:5d:0b:bd:38:7a:54:ac:e3:50:6d:3e:d2:a8:3c:f6:
ea:da:fe:a4:4c:62:ce:95:de:21:45:62:51:96:c6:d0:33:cd:
af:41:46:44:1f:e9:0e:7d:c3:3d:26:eb:9d:cb:a2:56:81:8b:
0b:d4:d9:5e:6a:13:95:47:7e:a3:70:7f:3e:a9:1a:9b:85:d0:
20:ff:b4:39:49:86:fc:24:2d:98:df:75:e8:b4:27:b9:1c:33:
18:91:9e:02:e1:c7:c5:ce:02:dc:ab:f7:90:05:ea:53:d1:6d:
6b:75:76:a0:af:00:8d:31:87:8a:09:97:05:72:a7:2c:97:38:
c7:37:78:bc:83:06:0d:21:27:7b:8d:24:dd:45:95:0f:43:da:
54:45:64:b3:28:a1:62:b8:b1:f8:96:1f:50:31:a6:94:bc:5e:
b9:cc:1c:e0:fc:27:b4:3b:6d:5d:d9:f2:bd:92:c7:ff:67:5d:
30:82:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:19:27 2025 by rpki-client