Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: Zzvf5JVK90MYCM64qm+PMe10AVG+jG+ZXaDfaFnAUTw=
Subject key identifier: CA:EB:ED:81:BB:36:B7:F0:33:AA:39:67:F4:70:D4:81:27:10:FA:DE
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 0199319176E7B3A5A44229AB12AC0DEA0681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0629
Signing time: Wed 10 Sep 2025 03:00:40 +0000
Manifest this update: Wed 10 Sep 2025 03:00:40 +0000
Manifest next update: Thu 11 Sep 2025 03:00:40 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: 2rLwF7kQOe8weiyMsWkgDiHgjbn01jPhc0saYztQ0hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:76:e7:b3:a5:a4:42:29:ab:12:ac:0d:ea:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Sep 10 03:00:40 2025 GMT
Not After : Sep 11 03:00:40 2025 GMT
Subject: CN=caebed81bb36b7f033aa3967f470d4812710fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:e1:d2:1d:b6:0a:09:18:af:9f:c1:8b:6f:
f5:5f:08:0f:b2:60:99:6e:e7:51:21:b3:1d:8c:f0:
e1:33:5e:10:43:bc:54:03:79:a1:df:71:5f:7b:58:
da:52:17:42:29:16:56:d6:d9:8b:e1:50:ba:b7:2f:
07:19:07:3c:46:fc:af:26:10:05:cf:79:12:ab:e9:
8a:99:7f:f2:f9:64:c5:b6:e3:94:0e:90:24:41:d5:
f8:a4:ac:de:31:a5:00:1a:7a:02:ff:61:9d:78:3f:
9c:97:0b:ab:c8:65:ba:9b:e5:a6:cd:0f:09:6c:b5:
c3:1b:e6:00:57:06:47:78:2f:bf:67:a5:68:73:e6:
6e:6d:3c:8f:24:03:01:7b:6a:2f:a3:df:7b:bf:4f:
2f:ac:3f:a6:34:fd:36:6a:94:e3:2c:27:2c:df:c2:
c5:ca:cb:fa:2f:35:bc:5e:1e:05:63:96:76:8c:22:
6c:36:b0:6e:ee:2a:b5:aa:d9:f9:01:c1:2d:d4:f3:
fb:91:cc:aa:ff:65:e2:9d:69:40:34:9a:90:aa:fd:
c0:24:15:d5:12:e3:c8:b8:d3:66:d7:00:a7:ee:d7:
da:61:6d:a3:39:9b:ec:8d:b6:45:99:82:c3:69:49:
c7:a7:8a:c5:f0:73:d9:b1:86:f4:16:75:a1:e6:47:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:ED:81:BB:36:B7:F0:33:AA:39:67:F4:70:D4:81:27:10:FA:DE
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:e5:17:99:27:a9:83:3e:1f:52:e9:ee:bd:85:bd:4c:5d:
c2:e8:b5:a0:bd:eb:84:93:f7:65:3b:2e:80:6e:d5:55:ed:93:
58:54:d7:42:87:5b:f8:b4:08:28:a7:4f:db:0a:a1:04:58:a2:
f0:c8:7b:49:0b:91:54:3a:7e:30:49:a4:9e:d8:7b:36:b1:83:
24:ea:21:96:a1:28:58:b4:9d:31:7a:2b:88:f4:90:70:1f:10:
ed:3c:18:9a:61:fd:a3:92:f3:ae:f2:53:78:12:b2:cb:39:33:
44:9c:7c:a4:74:22:50:27:9d:0f:93:c5:e3:97:56:4e:4f:99:
b5:3a:ae:82:5c:7a:f8:d5:fa:fb:dd:5a:25:1b:f1:30:b7:88:
04:52:df:44:0b:9a:42:c8:b5:c0:73:59:34:c1:38:67:f4:ee:
6e:22:89:d4:f1:67:a6:72:82:82:90:ae:c2:32:3e:06:9f:28:
ab:20:6e:e0:1a:23:aa:1a:af:b3:1a:05:3a:9c:c2:ea:8a:f7:
0c:97:b6:b5:75:35:9e:58:a5:58:59:97:b5:28:29:ae:55:1a:
42:ab:c0:e6:08:22:24:57:22:51:d0:97:fe:42:af:99:73:42:
59:f4:b4:25:fe:c9:2f:d7:d5:60:7a:56:a7:a6:89:3a:52:41:
6c:f7:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:11:52 2025 by rpki-client