Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: s7MCkpbdbGQhln9o2xKWvUaucOnyaqIVR9Y7IwSDKuI=
Subject key identifier: 1B:E5:68:8E:AB:D3:AE:A2:91:C6:AF:1B:B7:F2:BE:8B:C4:0D:83:79
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019921E742E2DE1F86079C77D6E98E9A48E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 02:00:28 +0000
Manifest this update: Sun 07 Sep 2025 02:00:28 +0000
Manifest next update: Mon 08 Sep 2025 02:00:28 +0000
Files and hashes: 1: O6yhVl-p8zPN_CcTQWHTkGKQoq0.roa (hash: HphO2Xf8amyd/7vc+hBrhD7m5RPblIsLscX8rs+h9y4=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: mJAF2nX5c9NaYxJcAoZfgsKahRDkfGmbkCfQ+jlQ4Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:42:e2:de:1f:86:07:9c:77:d6:e9:8e:9a:48:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Sep 7 02:00:28 2025 GMT
Not After : Sep 8 02:00:28 2025 GMT
Subject: CN=1be5688eabd3aea291c6af1bb7f2be8bc40d8379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:9c:a9:f2:75:14:32:b0:ee:3f:d8:b8:8f:
9f:ff:31:56:15:fc:fc:5c:a1:c8:ff:88:fe:cf:1c:
60:80:07:7c:01:2f:ec:f6:0c:b2:65:07:72:e1:5e:
2a:64:9e:81:31:9d:ba:b4:4e:4f:e9:20:28:76:05:
55:f4:ee:4f:61:b8:7f:34:0d:ee:e1:07:06:c9:7a:
f6:73:93:b3:77:c8:f8:6c:c6:cb:23:a4:b0:fc:c2:
28:3d:94:83:6c:11:89:f3:d9:ba:4d:bf:66:ba:8f:
4f:8d:23:93:6f:4f:aa:4e:72:c6:6f:c9:ae:67:aa:
e7:ea:59:08:07:f1:74:c6:65:b7:21:39:de:ea:2c:
9a:8c:26:14:ac:c4:28:0a:f9:da:87:54:01:09:f6:
d0:7d:9c:ec:cf:d5:aa:27:fc:e3:ee:ba:ca:c0:6d:
84:a8:8b:2c:e3:20:f2:84:78:26:01:51:62:b4:ea:
8d:6f:b9:92:83:3a:38:61:da:f4:90:d1:18:d5:fd:
22:82:67:45:b2:00:ef:dd:ee:ee:6e:5f:8f:c8:bf:
19:7c:3f:bf:39:19:1b:3b:45:a0:e9:3f:6b:df:37:
35:85:11:c6:3b:a0:b1:ca:74:4d:3a:10:41:69:ec:
00:05:2a:df:a4:76:d4:89:e5:69:03:7c:3d:e3:4c:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:68:8E:AB:D3:AE:A2:91:C6:AF:1B:B7:F2:BE:8B:C4:0D:83:79
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:18:d2:b4:95:d8:17:5d:9b:93:96:54:13:33:ee:74:99:9f:
78:aa:79:52:9a:7c:76:57:8e:b7:3c:e3:24:4b:77:e2:39:c1:
3f:d5:a9:ad:6c:94:c1:93:66:5b:9b:95:1d:a2:b1:3b:eb:57:
2d:a2:74:07:b4:75:df:6a:13:fd:38:a4:9f:63:c3:fe:0c:94:
20:93:67:21:ed:c7:9d:2a:b8:57:25:5d:24:7a:60:0a:9b:5c:
21:18:37:65:67:8c:81:43:3c:6e:ff:76:06:28:63:d0:58:1e:
f2:0c:4e:05:41:3e:83:2b:84:d6:18:bd:e9:36:66:5b:26:ef:
08:01:22:04:6f:c4:17:ba:e1:3f:1a:59:05:4e:51:e8:15:b3:
a1:cb:a9:e8:fb:7a:e6:24:f7:2e:a2:00:a1:73:7e:a2:9d:93:
f7:23:45:2f:dc:95:3e:95:7f:34:49:f5:56:a0:ac:b9:a9:9b:
a8:57:a0:14:f8:0d:ae:6b:e5:2f:64:9e:e5:81:2b:b4:99:ef:
0e:a0:37:c9:8a:cd:c7:a4:cc:1f:d8:81:cb:c8:94:d0:54:9c:
bd:4c:6d:32:58:bd:b8:40:03:59:9d:7b:0e:45:97:a0:c3:66:
dd:ab:e4:a0:26:6b:db:ca:25:64:90:bd:f2:20:f3:aa:ed:61:
32:53:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:01 2025 by rpki-client