Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: 5w7ajitxGmUsR2yTYthM6h3Sl9PanZrKCEv1zpDRCOw=
Subject key identifier: 04:35:5B:F0:54:82:BD:79:C6:47:BE:1A:F0:88:5A:90:07:F3:CE:56
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019961A25A13F82F5827C03363FEB25C0C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 03D6
Signing time: Fri 19 Sep 2025 11:00:53 +0000
Manifest this update: Fri 19 Sep 2025 11:00:53 +0000
Manifest next update: Sat 20 Sep 2025 11:00:53 +0000
Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: T9Asu7Fy7zmXNEZSUj3glHNhK4Iai9B/HHEQ82DgDDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:a2:5a:13:f8:2f:58:27:c0:33:63:fe:b2:5c:0c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Sep 19 11:00:53 2025 GMT
Not After : Sep 20 11:00:53 2025 GMT
Subject: CN=04355bf05482bd79c647be1af0885a9007f3ce56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:33:92:63:a0:16:a4:0f:3a:9b:dd:c6:66:
d1:9a:cf:32:8e:40:53:27:06:ba:71:fd:ea:c8:f3:
dc:da:18:86:ab:f7:fa:6b:e4:10:7b:d1:b5:56:0d:
e3:de:fb:bc:19:4f:42:50:e9:15:af:1c:6b:1e:60:
4c:65:a0:5b:34:15:52:00:01:b8:99:3f:52:5f:69:
29:8b:ee:19:9b:b8:d3:e1:cc:41:91:e4:fb:dc:64:
a5:4d:d2:d6:8f:c6:7d:ba:99:b5:4e:b9:a3:79:73:
05:dd:42:cf:ad:c9:c6:fa:df:75:db:67:fb:0e:ca:
ff:01:b3:6a:d6:56:65:7b:32:b3:39:33:c6:6d:01:
3d:09:0f:2f:f0:ca:52:39:2e:60:d2:9c:9a:34:98:
c5:ab:41:58:67:db:8f:dd:7f:c2:d4:9c:1f:ef:db:
3b:33:3b:61:c8:27:06:04:81:da:b9:75:0c:fe:c9:
a3:9e:5c:bf:36:b2:41:dd:92:55:80:82:db:4c:2f:
72:b0:f1:2b:81:87:6d:3b:0a:9b:42:5e:20:34:c6:
66:55:93:3f:da:cf:e2:f0:98:11:70:38:e1:fe:e3:
13:96:0a:61:9d:86:46:52:45:f7:f2:eb:cf:e0:ed:
d3:84:b1:16:a2:71:2c:41:b7:32:b6:21:91:a1:c5:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:5B:F0:54:82:BD:79:C6:47:BE:1A:F0:88:5A:90:07:F3:CE:56
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:99:8c:d1:e2:b7:a9:64:27:5b:d3:54:de:99:ab:9b:da:
59:dd:4b:92:df:54:8c:15:8e:dc:1a:03:9f:51:63:77:95:d8:
1d:f2:70:c3:d4:87:7b:38:79:80:41:0e:ba:81:f5:fa:88:37:
43:eb:66:25:4d:4b:04:35:50:94:6d:88:99:76:e8:02:d1:11:
f5:c2:c0:5c:5f:9e:a4:20:62:41:ec:ad:7e:e8:f3:fb:5e:15:
af:30:72:ef:db:8a:60:36:39:c5:d3:1f:0d:38:e2:1e:5d:7f:
09:55:66:ec:06:8d:e9:19:2e:9c:88:82:47:c1:88:60:12:62:
5d:46:ec:5a:06:75:90:b9:13:a6:c5:4c:a2:5a:9f:fb:0f:66:
dd:7d:6c:a1:7e:68:fd:32:d7:a7:71:c7:8a:d6:95:57:9c:21:
fe:45:d5:b4:9d:d5:19:a0:1b:23:12:f3:b3:b5:4d:2d:20:b7:
1c:de:ab:ef:96:ca:36:f2:22:81:01:bd:ef:6b:ac:55:d7:30:
5f:ac:11:41:5a:e9:d8:28:3e:9b:de:80:24:77:b9:3d:48:17:
46:c3:22:00:41:23:eb:9e:42:e7:30:c8:c8:67:60:65:6b:33:
8b:c9:63:e3:cf:99:2e:97:87:ea:5c:4f:bf:1a:d3:48:83:d5:
18:3c:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:20:25 2025 by rpki-client