Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: 34pmVs8B7pWiK8Elx+FMUukqUxGYpTNcHoe3wJKiymI=
Subject key identifier: 43:E3:63:14:47:1A:E7:77:9D:66:71:98:DB:F1:5E:0D:8B:C4:E6:CB
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 019939B900CD9D5B8F38C9D427C67C700AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 1209
Signing time: Thu 11 Sep 2025 17:00:49 +0000
Manifest this update: Thu 11 Sep 2025 17:00:49 +0000
Manifest next update: Fri 12 Sep 2025 17:00:49 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: ai/dP5UGfLBjrFv4SdfkOOjfvX4LIZ+l/DYikLphajI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b9:00:cd:9d:5b:8f:38:c9:d4:27:c6:7c:70:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Sep 11 17:00:49 2025 GMT
Not After : Sep 12 17:00:49 2025 GMT
Subject: CN=43e36314471ae7779d667198dbf15e0d8bc4e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:e4:95:0e:95:50:ac:de:29:d6:14:8f:65:
1e:9c:be:80:64:5d:26:d1:47:d2:76:96:06:ca:62:
6f:2e:0b:37:bb:cf:86:ba:48:83:ac:12:fb:c5:59:
43:cc:03:f9:47:65:fe:31:7b:92:e6:3b:e8:23:b7:
d5:97:ff:06:7e:53:ba:70:1d:ff:c8:aa:2d:b7:e3:
be:10:df:8b:c0:2c:a4:5f:8e:a3:6b:a0:e9:e6:eb:
f2:db:ec:c4:1d:27:23:18:fb:6f:55:cf:84:b7:a5:
08:47:1a:e5:46:d4:bb:82:cc:f6:b4:0a:a2:53:2e:
36:42:0d:5b:da:f6:f5:37:20:08:8d:70:be:29:97:
3a:13:a3:7a:0f:64:c7:66:aa:36:1e:9b:ea:41:8d:
c5:f8:6c:b8:bd:63:fa:3f:46:cf:11:d2:e6:b3:f8:
46:1b:8c:13:48:02:f9:5c:69:b7:f4:be:62:ca:40:
49:13:67:92:b5:87:83:3f:0f:19:fc:33:2a:dd:a2:
8d:61:f1:48:c3:21:b5:76:15:3e:7a:01:91:0e:0c:
60:c2:6f:c6:ad:c1:dc:7c:77:d8:26:0d:79:6b:ef:
40:49:71:92:95:78:06:f0:bf:1f:86:aa:f0:f4:92:
73:3a:ed:96:70:c9:47:6f:d0:e5:8d:33:54:a8:97:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:63:14:47:1A:E7:77:9D:66:71:98:DB:F1:5E:0D:8B:C4:E6:CB
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:48:be:15:c1:18:0c:e1:0d:19:5e:c0:ca:a9:20:1f:c4:
ad:cc:7c:11:ed:15:f9:8b:f0:67:3f:5f:d4:24:6d:09:5e:2f:
cc:db:78:2c:2f:89:83:93:34:63:5f:03:e0:13:45:4c:04:f8:
31:07:98:35:7b:f8:67:16:3a:f9:8f:5d:95:bf:ac:ff:49:06:
c8:85:2e:1a:6c:fd:e3:f7:82:cf:fa:37:02:e3:b4:ec:86:43:
21:89:e6:14:8f:d9:ec:4d:5c:b5:d5:fe:aa:29:24:af:30:a4:
9a:b9:d1:3c:08:61:8b:b6:3e:52:6a:a9:34:9e:44:6e:01:51:
75:75:cb:02:8e:ba:70:08:bc:c3:b9:19:49:06:66:a4:b3:ac:
31:50:fb:b9:e8:1f:f0:13:0f:16:6e:6d:8b:93:24:6a:70:34:
7f:4e:c1:85:53:18:c5:2a:9d:cb:18:88:79:3f:69:3d:f5:41:
7f:86:7b:c6:31:69:47:e4:5d:fb:65:76:39:24:05:ae:2c:4e:
2a:51:71:2e:15:8c:72:14:1d:b8:bb:28:aa:ed:cc:6b:ad:8b:
18:5d:95:4f:6a:6e:86:4f:90:1c:72:dc:05:60:84:a3:03:57:
6a:7b:c4:09:5f:38:c7:5c:11:94:9d:08:13:8a:49:19:8c:82:
a1:c8:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 00:12:35 2025 by rpki-client