Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: XFmEH0ippMC14UJlPydMmAKbKO8HnsCDUY+xPNekQr8=
Subject key identifier: 5F:41:F4:5C:81:BD:EC:21:8A:5D:89:FD:B4:19:A6:2F:D4:C0:C0:A3
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019921E7ADAA8193DB06EC2FDA8C17223E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 11B4
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: /9EmZGHsE0AJuH/XMmeT4fqZrWsTlYzx80LqwzwwVMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ad:aa:81:93:db:06:ec:2f:da:8c:17:22:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=5f41f45c81bdec218a5d89fdb419a62fd4c0c0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:61:5e:01:b6:12:d0:76:a5:97:05:c3:a4:
c8:2f:f2:97:a0:ac:10:a6:97:73:91:be:12:dd:95:
ad:e1:2f:ce:38:25:84:b9:bf:a1:89:cc:09:3c:1e:
bc:54:97:d3:7c:59:28:e2:96:ce:a2:bf:15:7c:8e:
be:f9:0f:63:7d:d5:1b:35:70:0f:2f:7a:17:c7:f4:
c2:75:8e:bd:59:fa:b3:07:60:ed:b3:d5:7e:d0:2b:
d1:fc:48:0a:4c:b6:12:e9:dc:80:6b:84:56:24:96:
30:a2:2f:7f:21:b8:55:a5:c7:e7:64:38:ad:3f:a9:
d6:74:4e:27:2d:30:aa:46:3e:db:d0:62:1b:fa:57:
be:59:61:4f:e6:75:4b:0d:2d:3d:14:3d:4d:eb:2c:
df:48:3e:9d:90:f4:a8:43:01:68:7d:8e:3a:7f:35:
25:48:d8:43:47:78:bb:48:ff:89:f4:3a:6f:dd:03:
96:cc:52:c5:27:31:58:b0:6a:7c:20:e2:70:35:55:
6a:94:ea:11:4e:4f:d6:cc:34:77:e0:08:a3:61:75:
cb:91:3d:ee:70:cc:ff:e6:20:8a:de:54:8d:77:cd:
13:0d:17:a2:35:07:d7:7e:f6:be:4c:a7:e1:0c:d9:
ac:99:d8:60:ad:3c:8d:8f:55:88:f2:02:46:44:12:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:F4:5C:81:BD:EC:21:8A:5D:89:FD:B4:19:A6:2F:D4:C0:C0:A3
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:b9:e8:31:c5:ad:ca:35:a8:75:87:b2:8f:7b:68:db:12:
c2:a9:51:f8:59:cd:bc:af:b5:cf:64:3f:a2:a3:ee:4c:4b:61:
76:13:5f:4a:5e:ff:f8:64:db:f5:56:2e:66:08:17:a5:eb:a9:
4a:e3:87:7c:24:91:f8:3e:57:48:23:e8:fa:4d:aa:e5:45:5c:
f1:98:08:f9:11:43:fd:3b:5e:4c:aa:46:f2:f7:64:a9:d3:3f:
81:28:7a:da:de:d9:f2:da:1a:83:26:f2:66:52:36:96:ee:47:
7a:43:31:a1:ca:32:94:04:60:bd:fe:1a:ff:42:18:ac:4d:1f:
c4:d4:ef:d7:42:09:f6:0d:81:04:d4:b9:24:82:18:b2:67:4e:
ae:83:1a:dd:3a:91:92:35:12:0b:0d:0f:90:da:ed:48:75:e6:
90:06:57:b0:8a:12:c2:5b:5a:01:8e:ae:60:87:ab:7d:44:38:
0e:e1:77:42:9d:21:d8:28:b1:32:d7:64:c8:41:86:e0:71:de:
e7:30:b3:11:db:d7:ec:76:6b:f2:66:37:f0:47:95:4a:bf:7f:
1e:48:a6:fa:30:a1:40:b2:a4:2a:26:77:3a:a4:8a:93:07:be:
81:2f:94:4c:2e:05:d3:6c:98:5d:da:d2:05:77:c2:e0:35:8b:
fc:48:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:31 2025 by rpki-client