Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: +RApKDFZHMxOnjICsm2EIYamWfqVEcJdVZRGXUMNv04=
Subject key identifier: C6:18:EB:35:99:49:4B:CF:DF:2D:1B:D9:A2:FE:06:A4:DD:F3:33:64
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 0198857A5C31FD754B31DC20ABFEBCAA6B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 17:00:45 +0000
Manifest this update: Thu 07 Aug 2025 17:00:45 +0000
Manifest next update: Fri 08 Aug 2025 17:00:45 +0000
Files and hashes: 1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=)
2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=)
3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: Bz2Zanx4G5l+8z1YY9BTRX9fJEnE6Nzp+V1fld+owNg=)
4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=)
5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:5c:31:fd:75:4b:31:dc:20:ab:fe:bc:aa:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Aug 7 17:00:45 2025 GMT
Not After : Aug 8 17:00:45 2025 GMT
Subject: CN=c618eb3599494bcfdf2d1bd9a2fe06a4ddf33364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:92:b5:81:63:39:a9:fd:4b:d3:e0:56:e2:
47:ec:93:8e:ff:eb:66:30:1d:dc:92:b3:ad:c4:79:
78:43:00:d5:61:46:fb:47:a2:38:ef:a4:1c:a0:b4:
a8:92:f0:1c:92:a1:20:85:f8:6f:cd:c1:7f:7c:4a:
55:9a:09:be:65:9d:2e:20:c9:df:cb:4b:fe:ed:7e:
62:f6:38:38:9c:93:62:53:a9:e1:66:36:0c:75:b0:
21:d1:50:50:c1:e1:f2:f3:bc:50:46:74:08:fa:52:
21:4e:2f:07:c9:f9:86:8b:17:8a:2f:19:52:51:00:
d0:4e:76:5d:c6:81:77:53:f5:b6:29:9e:f1:99:8f:
a2:0f:5e:d1:fd:89:2e:51:34:37:21:4c:9c:82:41:
35:d4:72:b5:0e:e2:c8:91:f2:eb:7d:bc:63:c6:ba:
56:96:21:29:5a:a2:9f:c2:ec:df:36:3c:5f:83:36:
be:ed:79:a6:2d:eb:a7:6a:0b:0d:3c:94:74:78:04:
1d:d0:7a:40:41:c5:56:98:33:89:f1:af:47:80:6a:
31:0b:3e:ca:08:fe:97:b1:9d:67:45:27:ac:a4:22:
5a:fe:8c:77:c9:1d:63:fb:ee:05:d2:f5:da:f9:3f:
b4:e6:4c:77:25:42:b8:ea:8f:34:62:89:de:ec:d5:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:EB:35:99:49:4B:CF:DF:2D:1B:D9:A2:FE:06:A4:DD:F3:33:64
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:50:54:f9:c5:e5:02:99:2e:19:37:de:ae:d9:16:24:f6:
3e:c0:0c:f0:e6:de:12:b1:80:4f:73:e1:d4:06:48:56:03:fd:
16:5f:d5:c9:79:8e:fe:46:77:e1:8d:6f:c7:63:f1:8b:ba:8f:
c2:06:a4:b9:e0:71:2e:50:2d:75:ae:55:50:c2:3e:7b:b7:99:
4a:85:4d:d9:4f:46:ec:a0:c9:5d:c2:df:a1:4f:ba:b7:fb:73:
41:1c:26:74:fd:ad:e1:d9:1b:41:07:6e:e0:41:46:05:61:70:
41:81:0e:f7:d5:1a:7e:30:43:33:3f:df:eb:db:a9:44:42:fe:
1a:2f:7e:4b:ed:a9:61:d3:93:b7:88:9a:2b:40:df:b2:fc:97:
73:1b:47:36:4c:7e:d3:fc:94:66:7c:79:14:27:42:16:af:ba:
c4:22:65:3c:f4:f3:3e:06:0c:8e:24:b7:a1:ef:3a:b2:37:0e:
53:3c:73:d4:bc:a4:af:89:16:8b:4d:44:55:ec:b6:a0:63:0a:
fd:9a:d1:6d:e3:1e:b4:76:0f:7b:51:e0:c2:5e:8e:0f:c6:f5:
ce:3c:f8:bc:53:a7:94:ac:67:d5:2a:5d:d3:0c:4f:96:9b:9a:
85:91:b1:1f:37:c6:11:14:88:08:7e:54:6c:41:ea:48:58:49:
7b:7d:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:54 2025 by rpki-client