Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: EdGmH8zX+xT76J5WIQWKOGtBOmIIM07WGG/+UJBFlcY=
Subject key identifier: 37:BE:56:B1:76:B3:19:2F:A4:92:5A:CA:C7:F1:05:C0:01:FF:E2:EC
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 019923A003D0619A56961CBB733E0CEB660A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:01:53 +0000
Manifest this update: Sun 07 Sep 2025 10:01:53 +0000
Manifest next update: Mon 08 Sep 2025 10:01:53 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: yXDEKtPOdPcHpAn1uSMFMTOWHDhljiS3zWN4Uu36bRI=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:03:d0:61:9a:56:96:1c:bb:73:3e:0c:eb:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Sep 7 10:01:53 2025 GMT
Not After : Sep 8 10:01:53 2025 GMT
Subject: CN=37be56b176b3192fa4925acac7f105c001ffe2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:03:7d:07:81:13:af:46:76:a4:fa:d8:9b:
12:24:0f:e9:b7:32:1f:82:40:0c:7a:29:05:02:f9:
1e:e6:a6:e8:05:8a:3c:a5:dc:ee:9c:5a:30:73:69:
8b:0f:3c:52:9f:7b:3e:de:aa:38:ac:2a:90:da:fc:
1e:df:59:5c:2b:8a:3a:2c:1e:a0:43:8b:fd:77:d0:
f7:fa:89:8c:c4:b2:e6:6a:c2:ee:00:fe:94:56:b1:
e1:cd:24:ad:84:33:5e:ef:b9:15:ae:ed:04:6e:b4:
10:42:9b:df:02:05:50:34:87:20:1e:99:96:9a:a5:
66:b0:9b:44:ec:c2:fc:6d:35:5c:ca:c2:27:82:0a:
43:a1:a6:9d:bf:21:e1:95:b2:51:c4:31:ec:0f:39:
cc:54:12:18:60:5d:92:f5:5e:e6:9a:1d:6a:dc:e3:
2c:e6:00:b7:29:9b:86:3d:20:8b:51:78:82:26:04:
ad:94:cb:4e:c4:27:7d:2a:15:ed:bc:db:97:11:3f:
8e:02:ce:b9:37:50:9b:a2:bd:e8:8c:75:ce:51:f9:
f1:f3:d0:47:72:51:fa:b2:ad:ec:ed:b1:1c:ac:18:
6f:bc:1f:0b:ee:28:a2:cc:81:10:7b:a3:bd:c5:b2:
8c:9d:33:4e:99:ed:bd:c3:a1:39:99:2f:e2:1f:a3:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:56:B1:76:B3:19:2F:A4:92:5A:CA:C7:F1:05:C0:01:FF:E2:EC
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:65:c1:a7:70:20:9e:72:86:a0:e8:4f:21:48:05:13:47:
b0:6e:5c:34:7e:03:aa:36:e9:77:af:d0:e8:5c:a7:8a:70:df:
e8:ce:7f:db:15:58:23:e5:ce:69:3c:f3:24:e4:54:93:35:8e:
12:20:f4:46:ad:24:05:51:e9:37:db:90:d1:8f:b2:36:31:48:
94:df:bd:1d:cd:02:7d:df:cc:c3:28:95:98:c0:03:44:58:b7:
4b:77:8c:fb:3e:49:af:3a:5e:47:64:15:82:ad:c6:60:d2:ff:
4c:41:2a:20:40:66:6b:e0:cf:47:3e:03:22:9a:6e:51:7e:0b:
eb:fb:94:ea:7c:31:73:ae:f4:9b:80:42:2d:98:86:0a:19:f4:
a0:91:33:b9:94:56:2f:f3:7d:d8:8b:59:07:df:5e:97:3c:07:
ef:41:93:9f:1a:ea:03:a8:7b:77:55:7c:6a:18:82:01:c4:b4:
6d:4b:f3:59:84:b4:8e:24:09:a6:90:ed:49:52:e0:c3:e3:56:
8a:50:2c:54:0e:97:10:ee:e6:3b:43:98:82:13:8c:9b:5f:a7:
1a:38:b0:f8:81:2b:7c:45:4f:e7:41:9e:b0:dc:58:a5:ad:ff:
d7:85:a1:85:f3:62:42:68:a0:4d:22:ec:10:4d:26:59:14:48:
c4:b5:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:07 2025 by rpki-client