Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: SeLbitXqi/0KeSFkZCJKvbAIBaDFAlbVgYaF2w6K9Ho=
Subject key identifier: 9C:2A:19:35:18:CA:B0:E2:E5:45:33:4B:CE:D7:D6:0A:AE:CB:BF:C2
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019894B7C9CF5423ED83646215AC9DAB5AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 14E8
Signing time: Sun 10 Aug 2025 16:02:09 +0000
Manifest this update: Sun 10 Aug 2025 16:02:09 +0000
Manifest next update: Mon 11 Aug 2025 16:02:09 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: bzmWW5hftoyLOjWxDmqq2+ucprpc8goSXM9fvyst2oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c9:cf:54:23:ed:83:64:62:15:ac:9d:ab:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Aug 10 16:02:09 2025 GMT
Not After : Aug 11 16:02:09 2025 GMT
Subject: CN=9c2a193518cab0e2e545334bced7d60aaecbbfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:fb:2b:45:cf:f3:bf:4e:81:37:5b:c9:49:
dc:49:90:93:73:af:f1:c2:33:c1:71:8b:cf:65:b4:
fc:d6:d8:29:b3:1a:fd:2c:53:5a:57:cc:4c:f7:ec:
28:5e:8a:07:d3:56:96:32:df:c5:cc:a0:84:17:ac:
fc:4c:f7:c0:7a:39:39:da:6b:0c:83:b0:b6:d1:e7:
77:99:36:4a:c4:04:39:44:08:ce:2f:a1:a5:ed:2d:
e4:93:fe:55:9c:02:32:2b:5e:c0:ec:9f:53:c7:b3:
c2:90:99:3c:be:bf:68:37:a3:e0:f5:a2:1c:7d:58:
f6:c3:c2:aa:ec:62:0b:81:06:5f:7d:11:a3:ef:57:
2f:11:e6:5f:6c:19:ba:e2:e1:b6:f6:14:5b:07:7d:
a1:db:0e:32:c2:e5:27:39:5f:75:a4:2c:40:5c:ab:
ee:02:a9:a9:d0:b5:63:8c:74:ee:64:d8:ea:14:af:
c2:b3:ad:b1:85:03:e4:0d:f5:f8:ad:89:7e:62:11:
ce:7f:23:6d:72:63:23:57:da:d1:86:ad:5e:27:24:
75:3b:c7:ab:b3:d6:ca:d6:15:36:12:f9:5e:fa:23:
8c:e2:d0:40:b5:00:10:df:2a:eb:d9:b4:57:02:8e:
97:9e:74:46:02:57:92:40:37:c0:1b:9c:cc:92:61:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:19:35:18:CA:B0:E2:E5:45:33:4B:CE:D7:D6:0A:AE:CB:BF:C2
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a7:45:92:1a:d7:fd:bb:c2:03:22:bb:62:6d:ab:55:ff:49:
de:66:05:9d:09:35:1f:66:b7:99:29:ef:5e:1b:13:46:79:d5:
d8:96:dc:d9:63:89:29:25:d7:8f:68:0f:d3:47:29:04:68:f0:
aa:15:4b:ff:ef:ea:86:08:5f:8b:4a:a2:5d:19:a6:3f:20:72:
e4:f2:98:8b:88:e6:cb:31:17:99:04:a0:3f:3e:43:5a:40:96:
25:df:bd:02:d3:e1:8f:49:aa:fa:e0:b9:f5:73:e9:70:52:5d:
91:0e:f1:4f:7f:f6:42:f2:2d:8b:e5:de:2d:b7:2a:ef:ba:40:
3c:05:3a:aa:94:74:0b:f2:da:45:ff:24:79:d0:51:8c:70:ed:
3e:cb:0d:ad:19:55:ba:54:82:44:0d:e2:e7:d2:2f:04:aa:fe:
be:fb:61:d7:e4:97:99:f1:ae:c3:cc:3f:87:ea:e3:81:09:b2:
50:3f:a5:14:2e:fd:e7:1a:ac:11:70:89:b7:6f:39:42:25:c8:
42:55:0d:b8:55:26:80:61:ac:29:4f:16:0d:d3:35:96:ed:78:
b9:e0:80:96:79:f9:d1:95:d8:b0:d2:0d:98:2e:43:f4:df:bd:
12:18:c5:db:0a:9c:cc:7b:c9:55:cb:46:d6:dd:9c:73:73:42:
c1:5d:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:16 2025 by rpki-client