Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: AuFgiy4GUSwixfk0gOoOhmUS3qW9SYSW1dZGBvUYQfw=
Subject key identifier: 54:D1:A0:79:07:F5:59:B3:41:1A:34:DE:30:2F:CD:C4:5A:F0:1A:2D
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 01993349548207FD1102AA8C90418DEC917C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 11:01:07 +0000
Manifest this update: Wed 10 Sep 2025 11:01:07 +0000
Manifest next update: Thu 11 Sep 2025 11:01:07 +0000
Files and hashes: 1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: n9Fy6CoTYPEWlwrMd+DKMN3cLBO7P9fwH+gVNawlfyE=)
3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:54:82:07:fd:11:02:aa:8c:90:41:8d:ec:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Sep 10 11:01:07 2025 GMT
Not After : Sep 11 11:01:07 2025 GMT
Subject: CN=54d1a07907f559b3411a34de302fcdc45af01a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:78:69:85:48:58:84:76:bb:0a:37:60:53:
18:f1:f2:c7:b5:14:df:a0:38:fd:dc:4b:8c:91:f5:
f0:82:be:e3:73:9e:ee:62:32:08:66:8c:81:8d:df:
8e:e3:51:7c:6e:8e:36:21:37:c1:62:16:5b:dd:26:
86:a4:47:83:29:88:5e:09:d0:62:f9:a4:fe:5b:13:
aa:08:e3:14:b4:04:d7:90:49:95:ed:2c:18:3b:3f:
80:74:ae:d1:c9:ae:d8:16:ad:ef:de:52:ef:99:07:
5f:2f:49:2f:60:90:22:f9:ca:91:73:b9:51:2e:41:
c9:89:ef:7b:f7:3e:d1:39:4c:c1:e8:b6:aa:55:0a:
f1:a2:57:e6:a3:c6:64:45:33:49:11:8c:06:a5:70:
c0:a2:63:f4:09:15:33:a1:7f:c6:95:44:62:62:bb:
c7:78:9c:c2:38:53:a3:4b:94:37:3b:7a:71:60:2d:
97:4b:6f:c1:ee:38:4d:54:0e:ba:5c:ca:42:15:65:
19:8f:48:31:e8:f1:78:7e:8e:a9:60:41:f9:33:6e:
00:49:96:0a:e6:e5:50:ea:a6:6e:7e:48:ad:8e:15:
36:ce:20:aa:5f:f9:9d:17:a6:0a:74:ec:76:d3:c0:
50:de:67:8e:2a:6f:b1:79:4f:4e:76:29:7d:30:0a:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:A0:79:07:F5:59:B3:41:1A:34:DE:30:2F:CD:C4:5A:F0:1A:2D
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a8:20:51:6d:2f:ef:35:f2:44:d3:06:ab:64:b7:3e:cc:41:
8d:5a:93:9a:6b:93:bf:01:de:f4:f2:9f:10:a0:c5:bc:e1:9d:
08:98:33:d2:d9:40:10:78:ae:2c:33:64:ca:9d:1d:33:01:c2:
fb:55:ea:82:6b:d1:1a:72:85:6d:57:e2:42:60:32:d6:81:19:
18:8e:6d:04:fe:40:4e:25:74:09:4e:63:2f:df:63:20:0c:2a:
f8:a0:53:8e:47:56:55:40:00:9e:dc:be:79:c6:35:2f:61:fe:
93:05:2d:68:96:6f:04:c4:e3:ba:f0:02:a3:62:6c:24:81:4f:
8e:d3:e5:50:c8:6b:5a:1b:64:38:a6:21:61:c3:c3:ef:10:e3:
cc:3e:3c:d6:4c:01:5c:55:f6:4c:4d:ea:4e:ea:bd:1e:dc:73:
b6:fe:50:7e:38:c8:34:6a:b8:6a:3a:da:31:da:82:9e:88:a9:
79:a6:cb:61:29:2c:9e:e4:4d:f4:1b:d9:15:f7:6b:9e:7e:11:
b6:5e:9b:a6:76:99:43:a7:a5:02:61:b5:5d:fe:fe:fc:ed:d7:
e6:a2:f5:cc:e0:64:3d:12:bc:c1:19:eb:96:e7:4c:96:45:05:
d2:a9:47:d4:08:e9:15:69:d1:90:3d:be:2b:e6:f0:11:b2:b6:
b8:e3:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:37:20 2025 by rpki-client