Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: gDLtnwIKwCSMewbUNiJ6DdZewEG+LzzuYqRgLDoWMf0=
Subject key identifier: ED:E9:96:A1:EB:72:79:6A:88:3E:3A:FE:EA:07:EA:28:B2:AB:8C:64
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 019921E7781F5C995EE16F9CB668A7500AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 01E6
Signing time: Sun 07 Sep 2025 02:00:41 +0000
Manifest this update: Sun 07 Sep 2025 02:00:41 +0000
Manifest next update: Mon 08 Sep 2025 02:00:41 +0000
Files and hashes: 1: 1-MrWjx41MLE2Craolgg-haNHa9U.roa (hash: tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: c5BQ+B7dhVfzM6nvTzevRbZuue+ON7Q7B+n6wY52cH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:78:1f:5c:99:5e:e1:6f:9c:b6:68:a7:50:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Sep 7 02:00:41 2025 GMT
Not After : Sep 8 02:00:41 2025 GMT
Subject: CN=ede996a1eb72796a883e3afeea07ea28b2ab8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:3c:4f:dd:d3:a9:24:eb:41:8c:a7:01:97:
ba:7a:c7:83:55:09:c1:4a:73:50:e2:d1:dd:6a:ca:
e2:03:d7:49:80:b2:90:9c:64:ee:35:8b:e9:00:7a:
9a:56:65:7f:e7:f0:4e:2a:ce:b5:ba:4c:4e:47:21:
35:3f:7a:28:ec:9f:1b:1a:e3:41:6c:50:49:01:58:
bf:69:f2:46:3f:ce:ad:34:62:95:8d:2b:21:4b:2a:
96:46:22:36:61:82:42:61:d8:19:62:ab:8a:03:44:
18:c5:a3:4c:41:57:79:3d:25:e1:e4:67:4e:6e:5d:
11:14:36:1d:68:84:8f:0c:05:ce:c2:12:d6:e5:e9:
b0:fa:90:d0:98:7e:d3:f5:47:22:f7:09:99:d2:cd:
e6:68:21:b2:12:77:99:27:f4:cc:35:81:c7:77:11:
a4:ce:a5:17:3d:d7:83:66:8f:36:75:fd:e8:7f:64:
74:63:a0:38:7e:53:9b:5b:88:78:55:3d:98:6d:f1:
88:38:f6:37:ad:57:09:b8:55:e4:fc:f8:7d:55:64:
97:01:6f:52:bb:66:e0:74:6f:39:41:7f:33:ab:c3:
aa:8a:7d:cf:52:d6:22:0a:35:0e:60:e6:11:66:53:
bb:a9:65:cf:fa:e3:b3:c9:73:0b:07:35:57:63:79:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:96:A1:EB:72:79:6A:88:3E:3A:FE:EA:07:EA:28:B2:AB:8C:64
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:56:a6:4d:40:32:90:f8:54:6d:1d:10:a2:dd:49:4c:30:d9:
77:31:60:c0:c5:c4:2a:e4:71:31:d0:e9:e6:a4:ca:6f:7a:86:
50:72:88:ee:fb:a6:5f:75:f7:cb:34:26:b0:f2:c8:a7:27:53:
1a:53:3e:21:d2:93:a7:2f:3b:58:3a:9d:33:28:1d:7e:23:aa:
c8:20:07:5b:6f:7d:f5:16:8d:71:91:ac:40:94:73:45:43:48:
81:2f:80:d8:2f:00:d4:86:09:c7:d7:29:6f:ab:bc:cb:dd:c7:
9b:f6:0b:f7:c6:eb:91:19:81:58:63:cf:7b:80:f7:c0:c5:33:
97:7b:97:c9:ab:30:6f:2d:07:b6:03:7c:31:a1:d8:fb:57:74:
fa:4c:87:69:6d:b6:b0:a1:06:b1:54:17:f0:83:39:9c:a3:ac:
69:d1:fd:a3:7a:10:ce:83:2b:5b:81:f5:87:64:02:23:3f:45:
b3:e2:99:df:a1:11:17:6f:06:00:7a:e8:39:db:bd:d7:ed:25:
74:ed:93:e9:c0:3c:71:87:d3:a2:7f:4b:91:11:98:79:07:79:
95:15:fa:3d:82:17:3a:25:ac:64:61:38:19:c8:5b:49:b3:14:
6e:2d:09:c6:ee:b0:2b:d3:88:37:75:fc:48:20:ed:ad:f3:cf:
0c:e1:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:26 2025 by rpki-client