Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: /fKMNm7BJSu70Eun15yhvtxfjsMU5crO/ZsymvKTrJY=
Subject key identifier: 13:D7:CC:B1:1F:06:18:23:EA:D0:A0:42:53:A4:E5:F2:40:87:78:E1
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 01989DF0AE52F554FB417887A03A46E48891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0E30
Signing time: Tue 12 Aug 2025 11:00:52 +0000
Manifest this update: Tue 12 Aug 2025 11:00:52 +0000
Manifest next update: Wed 13 Aug 2025 11:00:52 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: Zjkgmus5SP5ZMarDK+zL1WtZM9lq6kTqV9vnW6HSGLc=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:ae:52:f5:54:fb:41:78:87:a0:3a:46:e4:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Aug 12 11:00:52 2025 GMT
Not After : Aug 13 11:00:52 2025 GMT
Subject: CN=13d7ccb11f061823ead0a04253a4e5f2408778e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:b4:d3:63:cd:b4:e3:9c:2f:c0:eb:fc:fb:
2b:98:7a:71:2e:87:88:f2:9c:cb:93:09:00:bb:d7:
a6:bc:39:00:5f:03:03:61:f7:32:22:2c:a5:e6:6a:
6c:ea:8f:31:cc:47:75:93:20:8f:d7:c9:74:a2:17:
f3:1c:46:fd:e6:0d:40:65:d0:7d:3a:87:14:2f:6f:
57:ab:c1:89:e4:c7:54:33:2d:78:9f:b5:d7:2f:c3:
90:2c:c7:df:8a:e5:98:25:a4:0f:63:37:5e:2e:4f:
b7:65:03:f2:c5:a9:61:31:a5:b1:ec:06:d3:60:ea:
cd:ff:cf:d8:52:bf:c0:95:ae:0c:8c:70:52:46:82:
6f:7f:dd:cd:ac:b4:bb:50:d4:90:01:29:e3:c0:86:
a1:ae:4a:41:ab:0f:84:2e:8f:f7:83:a5:60:21:8b:
e5:f3:1e:23:fc:6e:bd:72:60:b0:b9:bd:29:47:c7:
11:44:5b:8f:ec:4e:51:c4:9a:59:41:2b:c5:14:1e:
c5:74:df:59:71:c5:4f:b6:ac:cc:6e:69:95:6a:dc:
8b:4b:2e:43:6a:32:5d:7b:72:1d:f0:f3:72:6b:87:
2a:7d:c4:48:8a:2f:65:1c:b2:2c:69:1c:12:0b:90:
9e:69:af:8e:5b:fb:3d:4b:6e:32:da:99:11:62:1c:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:CC:B1:1F:06:18:23:EA:D0:A0:42:53:A4:E5:F2:40:87:78:E1
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:54:45:bd:5a:44:02:9b:bf:11:49:27:cc:e3:0a:c0:97:6f:
3c:cd:cd:db:bc:4b:8a:f0:bc:dc:37:2c:4c:48:22:2b:02:8f:
30:a8:fc:a2:e7:90:45:20:ad:3a:d7:5c:b8:94:eb:78:4f:2e:
2f:df:3d:90:f6:49:0f:6d:07:9a:38:f9:a8:f4:1e:f9:72:e8:
2b:c7:d6:bd:5c:cc:c1:68:cc:bf:7b:1e:1c:70:a4:55:b3:8b:
3a:97:98:5e:82:3e:59:73:ad:cb:6d:65:b1:b4:bd:bd:7f:50:
21:42:ec:08:8b:e7:20:13:2e:2c:53:ee:32:ee:82:d0:df:a2:
04:a8:e7:2b:98:f3:b3:58:7f:f8:41:47:35:a7:1e:d4:43:26:
4a:29:d8:8e:89:a5:7e:e7:96:44:6e:40:6f:bc:56:e8:92:cd:
5d:9d:4c:57:a1:32:d8:2b:b1:69:1d:e3:be:12:14:d4:96:2f:
ab:62:b9:b5:90:69:19:b6:3f:d1:5a:4f:0c:77:11:47:f9:da:
4c:a5:3f:aa:ec:bd:e0:bb:ec:e9:09:a2:94:50:9f:3d:94:77:
b3:1d:8c:0c:0b:ae:e6:b5:e0:a3:62:8c:ca:0e:15:a4:cf:d0:
04:73:8c:15:da:12:ce:f3:ce:66:a7:23:88:8f:06:01:da:30:
e7:9e:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:09 2025 by rpki-client