Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: mpxerWp/E1/9jdO7IhYXHyWFZpvBIL5cf2nFy1deIA8=
Subject key identifier: 61:F3:67:8F:95:2C:FE:64:78:31:D9:AE:73:27:7D:5A:11:E0:C1:40
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 019A4F2AFC8889AD7F292BE91E898FB7ED4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=)
2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=)
3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: 35Nv4JxhqRHCtns1BarS/6wdssASFygjpWcKVmnyU+w=)
4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=)
5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fc:88:89:ad:7f:29:2b:e9:1e:89:8f:b7:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=61f3678f952cfe647831d9ae73277d5a11e0c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:5c:94:4a:ad:9f:91:3d:6f:c1:f2:06:8c:
8c:7b:b9:89:f7:84:f2:70:33:14:99:77:2c:85:5b:
29:5b:8b:ca:df:34:1d:4d:cc:e4:09:00:10:f8:28:
b5:09:3f:bc:2c:41:07:a6:99:85:01:0c:f5:e4:91:
eb:9d:ef:cc:da:64:be:98:65:5a:d5:8f:cc:c5:d7:
8e:f6:d6:14:c6:57:2e:f6:40:53:76:25:32:01:df:
91:04:e4:96:35:e6:03:ef:c7:64:66:34:fb:cf:ff:
2d:45:dc:3e:17:21:f8:0e:4e:fb:45:ff:17:1f:a1:
c7:a0:01:2a:98:ae:94:df:0c:39:6f:39:66:dc:6e:
4b:7a:fd:fe:2d:e5:ac:c7:cc:9e:60:be:68:9c:e1:
14:b1:88:c2:2e:80:81:0e:c3:7b:a7:1c:91:ec:f9:
79:02:bb:67:60:a0:97:f3:44:81:82:7d:cb:86:15:
8b:14:c7:ed:cc:49:d6:7f:41:01:39:7f:65:ce:17:
27:8b:1c:52:43:12:f5:8e:68:8d:c4:6b:e3:01:35:
cf:fd:bf:80:ad:ff:79:6e:8f:a6:0b:49:e4:5a:df:
ce:b3:ad:8b:eb:55:09:0a:63:5b:65:7a:76:f1:dc:
3a:d4:01:e4:59:10:0f:16:d0:4c:12:6f:2b:a7:d8:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:67:8F:95:2C:FE:64:78:31:D9:AE:73:27:7D:5A:11:E0:C1:40
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:8b:bd:61:ce:ec:aa:32:d0:c6:92:e9:2f:c3:e1:db:43:
ad:71:e2:3b:c2:6f:d6:da:76:6f:04:de:01:bb:e4:d1:be:5d:
f1:96:d0:4f:b0:82:30:77:cb:c7:a3:3d:ca:e1:38:47:45:0b:
c0:a3:59:66:ec:c6:07:19:4a:ba:0d:f0:e3:8c:6b:a2:28:c3:
f0:81:f7:ab:35:bf:ed:3f:a4:f5:2b:47:5d:b2:2c:2a:a8:cf:
99:de:e1:d0:b2:bc:82:cd:c8:64:c8:3a:82:e8:26:86:86:f1:
4f:0e:ce:21:f1:ed:a2:0a:1a:50:d3:b4:db:d9:11:9a:99:26:
66:6d:8d:72:c8:d2:f2:ff:9b:4a:69:e5:52:f3:5f:b8:bf:7f:
a4:5b:f7:c4:5c:0b:6c:95:24:ac:16:85:f7:8b:20:05:80:1c:
03:a9:29:17:27:b0:74:d4:24:95:c4:15:40:fb:ed:0d:47:c7:
f7:be:82:f9:e2:af:fa:fd:d4:5c:9c:57:61:44:81:4b:3e:9d:
e4:a3:8f:4b:a5:39:fc:2f:67:09:86:60:c8:73:6b:2e:d2:a7:
d2:5b:61:5b:04:36:c2:e8:7a:f4:56:dd:ae:fc:23:3d:dd:34:
17:4f:78:4c:e6:7e:f1:aa:c2:86:64:85:e0:a8:14:e9:bf:7a:
af:8d:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:26 2025 by rpki-client