
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: WmZ6hjvVF4ZnJU15RVDpcfAKkrlBZ7X3arH9E+fBkaA=
Subject key identifier: 00:CC:00:FA:98:F5:CE:11:87:B3:57:40:CC:17:E4:18:9D:AC:4F:4C
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 0199228CF0291C0B1FC35837FD587F05BBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1451
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: FifiB34tJ/UX5B/tcYKPpQGl+2pwBy4M2FHgJhf2KN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f0:29:1c:0b:1f:c3:58:37:fd:58:7f:05:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=00cc00fa98f5ce1187b35740cc17e4189dac4f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:b3:3e:3a:ec:b6:da:c4:41:32:38:ad:67:
88:84:67:a8:d0:25:c3:7e:24:31:38:e8:0c:33:00:
0d:bd:f2:35:6c:63:28:07:41:59:85:e2:dc:31:dd:
f1:19:ff:2b:83:2b:8f:a7:a9:c3:e5:95:79:95:94:
c2:13:80:c6:63:d8:97:7f:cf:ef:dd:51:7a:3d:d1:
77:d3:3c:53:70:dd:41:aa:23:2b:bc:2f:6a:e7:f9:
cc:5a:6f:fe:1b:f2:92:81:d4:44:56:01:c8:26:11:
0d:1b:21:50:62:f9:92:19:1f:70:5a:35:56:ad:d9:
52:6b:2f:29:e0:c2:cd:40:2c:9c:0e:2b:0c:21:b2:
cc:77:c8:6d:f8:f6:37:55:17:1a:3f:8b:c4:50:fb:
95:b4:27:0a:29:7c:59:6a:5a:6f:b6:b6:97:79:8b:
e4:29:bf:33:02:fc:fa:55:66:70:3b:0e:e3:3b:0e:
df:2f:b0:12:c0:c0:5b:0a:b0:eb:72:25:5c:9c:9e:
0d:1a:0c:54:6c:83:67:8f:ba:e7:de:0d:a2:84:a9:
82:a8:84:4c:90:23:4e:10:28:44:65:70:97:8a:45:
a8:98:7e:c8:c9:21:5b:64:59:de:3c:10:8e:7e:9d:
d5:f5:b5:f8:d8:d2:b6:3a:63:5c:a5:f9:9a:9c:7c:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:00:FA:98:F5:CE:11:87:B3:57:40:CC:17:E4:18:9D:AC:4F:4C
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1e:74:b2:ad:06:22:18:ee:24:3d:cf:84:57:73:30:d5:d7:
fb:a9:38:da:75:a3:67:13:4f:bd:19:31:bb:3c:9c:53:c7:a1:
cd:4d:76:63:96:7c:19:07:bd:84:01:76:b9:79:11:a8:8e:1d:
32:14:05:53:f0:e1:bc:48:8a:45:81:af:e6:74:58:81:e2:7f:
97:cd:1e:53:c9:da:d0:31:ec:64:12:76:ab:6e:6a:c0:de:5a:
ea:33:43:2d:e9:23:83:f3:72:7a:8c:47:84:3e:08:18:4b:4e:
c5:78:03:5f:3f:87:c6:eb:78:90:74:d6:21:c0:88:fe:39:45:
93:97:c5:63:07:c7:b5:d4:c8:de:64:c7:b3:13:be:2a:27:86:
f7:ee:6a:e1:85:98:5d:8c:be:2d:f4:e0:97:44:0c:c0:c6:7f:
70:a6:b8:27:54:60:b7:92:3a:40:2d:f0:78:38:59:73:c0:fc:
0b:75:03:6b:80:f2:1c:d0:19:1c:7f:2d:03:67:44:a2:e7:54:
d7:35:2d:f6:d8:d7:8a:9c:48:c8:0c:4b:8a:87:b7:35:a7:fd:
30:3c:ae:c5:e0:4e:27:89:ed:2f:cc:1a:26:b6:43:92:ca:af:
f5:56:55:b6:22:2f:01:b0:91:fe:64:38:bb:21:ab:72:ff:2e:
76:23:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client