Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: XXOYNhyO40HXOm5zHXBjZeKdZQWG3nL/9x3SZEwN360=
Subject key identifier: 65:40:09:7D:74:AA:F1:91:41:3B:4E:1D:0B:35:5F:6B:1D:26:23:C8
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01993839364184E915A59FFB8AF2B2563C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0F79
Signing time: Thu 11 Sep 2025 10:01:37 +0000
Manifest this update: Thu 11 Sep 2025 10:01:37 +0000
Manifest next update: Fri 12 Sep 2025 10:01:37 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: sOihcV/YyjBdPePQ0Rudj6i5rZ0qw8kub2xsbdJ3Z5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:36:41:84:e9:15:a5:9f:fb:8a:f2:b2:56:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Sep 11 10:01:37 2025 GMT
Not After : Sep 12 10:01:37 2025 GMT
Subject: CN=6540097d74aaf191413b4e1d0b355f6b1d2623c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:c8:d4:34:5c:54:21:90:b0:40:f2:7d:f3:
ce:3d:0f:b2:ef:9f:71:9e:a6:76:6b:f0:11:7d:aa:
fd:37:bd:5c:c2:ba:28:3b:98:c1:b3:c3:87:54:35:
db:9f:6b:1d:f0:72:c1:8b:18:a7:1d:d1:ff:b2:f9:
73:c0:eb:1f:da:fb:e3:1b:b7:a6:95:3f:1c:93:27:
91:8f:52:ab:6b:de:fa:e8:82:cd:84:39:57:5f:08:
44:e6:a8:35:8f:0b:b8:e7:af:19:82:c8:33:58:58:
ba:ad:f7:d9:4d:5a:88:33:42:50:e3:e5:ae:51:3d:
86:87:61:57:e9:04:14:87:d1:d8:28:e8:30:18:1c:
21:07:f9:55:c6:eb:8f:d4:6f:4b:b0:e5:17:27:64:
6d:94:10:ca:7f:27:75:bc:3a:d0:4e:a5:bb:4b:14:
32:bb:90:31:57:02:16:8a:ad:69:84:b2:ca:b8:d7:
f2:6c:2a:49:47:ce:2a:5b:8c:f9:3b:fd:f7:99:92:
21:b4:9d:9c:a4:0a:7d:b7:28:de:2c:06:bd:67:9e:
7d:66:2a:da:e0:53:6d:2a:f2:e0:d0:b5:e3:5c:bb:
42:09:42:76:27:60:3c:36:99:d7:76:be:44:8b:09:
96:fe:08:0e:44:99:78:c5:d7:c6:0f:4d:2d:ea:88:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:09:7D:74:AA:F1:91:41:3B:4E:1D:0B:35:5F:6B:1D:26:23:C8
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:1a:cd:d7:54:5d:ad:ca:96:72:74:92:ab:ec:cf:29:c7:
04:d6:d4:57:2e:70:e9:63:1f:8c:99:9f:c3:e0:3f:4b:e7:a4:
c2:16:5e:29:ca:43:25:41:21:d9:1a:34:f7:71:63:7c:39:1a:
ed:aa:bf:59:54:fd:87:95:72:2e:c4:42:be:95:b2:13:db:27:
7f:3a:28:4c:39:bf:c8:59:09:ae:82:87:f4:cc:48:06:f8:52:
22:9d:5d:1b:14:59:db:94:59:9d:49:5d:e5:e3:41:0d:03:b1:
8d:bd:54:34:dd:84:f3:25:b5:b2:83:b3:2f:b6:9e:31:3e:b2:
23:97:fe:7a:9c:bd:d0:3b:4b:cc:11:5a:38:6d:94:7c:db:42:
36:04:de:1e:13:c0:8f:e8:56:ac:f6:fc:c2:69:04:eb:d0:cd:
94:6a:6f:93:99:3e:15:c8:03:62:84:1f:ad:7c:a8:6c:4a:ef:
ad:97:18:62:1e:16:e8:50:46:22:d2:69:8d:6c:96:45:02:72:
4e:aa:48:7b:f9:80:70:90:60:25:e2:15:e0:15:3d:ef:1f:c4:
41:f7:c9:09:3d:e9:a5:b8:2e:25:5b:6e:aa:56:fb:a2:12:69:
dc:bf:be:ce:c8:46:ab:b7:81:fb:88:85:e5:21:d7:ab:e4:77:
03:c9:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:45:10 2025 by rpki-client