Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: jA1A1z2HXRP+dlO8Km3rTnWDJ96EDZXU7G+fqQyQjNs=
Subject key identifier: 2A:E6:BA:7B:AC:0D:C8:C4:FF:0B:F3:7B:B0:6F:45:2A:EB:37:BA:4A
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 01993501BD6E65A71B214E8B30E7FC748F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:02:10 +0000
Manifest this update: Wed 10 Sep 2025 19:02:10 +0000
Manifest next update: Thu 11 Sep 2025 19:02:10 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: ntzYNHOAM6Qps90x49reFUBSUFwLLamSDfahPWaTGrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:bd:6e:65:a7:1b:21:4e:8b:30:e7:fc:74:8f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Sep 10 19:02:10 2025 GMT
Not After : Sep 11 19:02:10 2025 GMT
Subject: CN=2ae6ba7bac0dc8c4ff0bf37bb06f452aeb37ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:f8:d5:3f:79:e2:30:ca:33:05:29:18:ff:
71:8e:7d:24:e8:1c:51:9c:f0:d6:cf:b7:2a:00:84:
87:12:2f:aa:5f:25:8a:b0:2b:dc:9d:a6:74:c7:ad:
c3:7d:ce:c1:a3:65:70:30:34:db:9b:c2:2b:fa:9f:
c2:59:21:e4:b7:ad:85:36:e9:e4:f1:49:e6:3f:c9:
16:63:e0:bd:a1:30:33:78:8f:cd:70:0f:49:9d:13:
bd:0e:9b:ef:c0:c6:f0:35:96:8c:1d:cc:b5:e9:61:
85:4d:61:d1:52:3b:dd:20:5c:68:73:41:6b:7e:06:
45:e4:c1:4e:29:d0:da:bf:42:5c:46:90:2c:8c:16:
78:44:73:20:08:92:21:11:fb:98:0b:07:90:f9:1f:
f7:18:d3:4f:77:0f:fa:53:ba:50:ed:93:f5:7b:55:
c0:91:00:ee:35:3b:af:95:79:f8:60:0d:8e:e8:c0:
82:c0:28:44:54:49:fc:ce:f4:ca:80:2e:9f:f3:db:
6a:4d:f0:75:90:af:3b:77:ad:a4:5b:85:99:81:91:
6d:cc:6f:0d:b5:29:89:77:cf:d9:ea:00:82:7f:97:
13:63:16:5c:1b:6b:e9:f5:83:00:64:66:97:b9:05:
c8:f1:9a:05:a5:27:78:e0:09:84:e0:a1:b6:01:1f:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:BA:7B:AC:0D:C8:C4:FF:0B:F3:7B:B0:6F:45:2A:EB:37:BA:4A
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:19:51:d0:77:83:4e:d3:6b:fd:35:fc:f5:af:10:b7:a9:
ae:23:ba:6c:16:c8:2f:d6:d8:52:21:0b:bb:79:ad:54:d1:7f:
34:92:3a:11:f8:bd:34:90:db:ef:1f:14:26:84:cb:d4:7e:fe:
ed:93:9a:cf:38:7b:6e:13:aa:38:ac:6f:27:d3:b4:37:24:c5:
43:91:12:f0:2d:78:8a:95:b9:c6:28:5d:70:64:b4:a0:61:73:
cb:b7:8c:79:57:27:a4:67:de:38:7f:1d:2d:a2:1e:ba:6b:97:
e4:df:ba:3b:18:00:ac:d8:52:23:0f:1f:92:bc:10:9e:42:c6:
d3:8c:ee:83:7b:0a:10:72:00:0c:00:54:ac:2c:f5:9d:5b:0e:
1a:4e:e9:97:f7:1f:a5:49:97:ae:2c:92:18:a0:2c:94:88:01:
7f:32:43:ca:b0:e1:75:c4:e9:23:52:c5:69:4b:71:61:9a:6b:
4f:0b:d5:e2:70:21:8d:58:09:6e:89:40:9b:d8:fe:17:97:81:
d3:42:1c:90:a6:b0:7a:6a:87:9e:4a:50:4c:ff:b3:74:a0:65:
b4:83:a6:1e:1d:04:fc:2b:b1:20:7f:55:8d:92:4b:50:72:6c:
93:af:bd:bc:bb:2a:68:2f:2b:79:f8:7d:1b:fa:20:02:0d:68:
fd:0d:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:12:15 2025 by rpki-client