Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: g4JYOfcU3rnikLvtMHRfGS2PIGCpXjvV+SyuTE1p78U=
Subject key identifier: 69:F3:38:43:43:48:12:35:F3:56:42:7A:F0:37:12:46:5A:71:84:EF
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019922C3C5B39E61FD3F93759DF7D984446F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0AD9
Signing time: Sun 07 Sep 2025 06:01:19 +0000
Manifest this update: Sun 07 Sep 2025 06:01:19 +0000
Manifest next update: Mon 08 Sep 2025 06:01:19 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: cwqEH2kH/7BViZWTtY2z/rGjBBO42g9GDULXX1xfBFc=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:c5:b3:9e:61:fd:3f:93:75:9d:f7:d9:84:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Sep 7 06:01:19 2025 GMT
Not After : Sep 8 06:01:19 2025 GMT
Subject: CN=69f3384343481235f356427af03712465a7184ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:0c:8e:51:68:5e:53:a7:6c:12:df:95:5e:
2c:ce:d0:f9:f5:06:cc:9a:ab:c3:c4:25:04:12:70:
c6:ca:d0:e5:b0:79:02:31:c8:e2:44:2b:63:04:87:
38:6b:7a:6e:35:d5:50:52:7d:34:4f:b2:36:dc:71:
43:f0:7a:d0:35:2e:c6:09:d0:d3:82:63:2c:fe:98:
d7:e6:63:85:c7:f8:87:92:ba:cb:fd:74:30:e2:25:
db:d7:aa:94:49:c0:af:c6:62:b5:c4:20:ff:13:25:
3c:31:f6:41:c5:e7:9c:cb:dc:2b:9d:62:7f:32:ee:
60:11:72:ed:38:71:39:c7:4f:ca:ed:94:66:c8:25:
ef:0b:ff:cf:24:db:d6:e2:68:a6:61:f4:3a:21:e8:
f7:a5:ac:76:37:ff:56:08:c3:b5:e1:36:3c:79:6e:
eb:99:3f:7f:20:3e:c4:bf:2f:c4:f8:a9:48:91:6f:
d4:37:47:9b:00:7f:17:cd:09:98:9b:d9:08:39:4d:
d9:f6:a4:0b:0e:1a:3f:ec:92:8d:ba:2b:c0:5d:05:
4b:99:08:51:c3:63:40:36:43:3f:1a:99:e3:2b:1e:
a9:b5:bf:2a:3e:e4:2a:31:8f:14:66:12:2a:01:9f:
0a:c4:e5:e2:75:2e:35:4e:e7:7e:98:04:30:6f:bf:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:38:43:43:48:12:35:F3:56:42:7A:F0:37:12:46:5A:71:84:EF
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a1:fd:57:65:f9:bd:67:b6:75:05:bc:50:70:31:ba:cf:3b:
2d:53:7a:03:d1:36:f5:59:ae:bd:b8:b4:52:9c:9c:fd:83:17:
92:e3:7c:37:65:7e:7b:a4:c6:0e:d7:68:bc:05:1c:f6:dd:3d:
29:ee:61:6c:ff:85:ea:fe:0d:c4:bc:09:91:f2:af:37:d7:8b:
70:b3:37:6a:94:c8:71:98:01:d2:d2:eb:90:6e:c0:90:67:90:
ec:63:25:17:7c:17:26:03:61:c1:15:a7:37:fa:28:38:7d:6b:
f0:0f:e0:58:a8:60:05:10:aa:b8:d4:b6:90:50:ce:9a:48:3b:
b3:e1:0c:06:29:85:3f:bf:6d:a5:61:f6:7d:a4:ce:07:70:dc:
4d:d8:9a:99:f5:75:b8:e1:cf:b5:93:5e:08:34:71:a3:25:3c:
79:3b:e7:55:da:d5:2e:06:83:ad:38:28:a5:90:7d:07:67:f2:
6a:5b:67:aa:cd:5e:28:e5:6c:8a:ab:0c:2c:3f:2c:c1:ad:c5:
0f:39:68:c1:d6:2e:9b:83:a0:25:a6:49:f0:33:39:ef:1d:b4:
71:0e:88:6a:f8:1a:ba:c2:ca:b1:b1:c3:5d:78:ec:b9:85:83:
e3:89:4b:27:4d:de:4b:bb:ee:f5:07:a8:f9:62:59:33:6f:b2:
bd:26:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:53 2025 by rpki-client