Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: DK05aIxiAaLWI8xhfVturcSnH3ZcPKdtC0H39CmuPaA=
Subject key identifier: 53:04:11:E5:29:FC:FC:A7:E8:B0:F8:78:77:39:F8:9F:DE:A2:F2:10
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019872CFCE04F7A2A22DA00410115E50C3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 02:01:17 +0000
Manifest this update: Mon 04 Aug 2025 02:01:17 +0000
Manifest next update: Tue 05 Aug 2025 02:01:17 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: cAgDhFfuw1wfTsjL+RiI87oyM0b/hson1Apm5pT+UV8=)
2: qyP6ZOFyUvmIxsAwvIR1crurzkA.roa (hash: ATCZOmbWRgy8PLsqpH1t1OGoSYpKTwjDGworctuzaMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ce:04:f7:a2:a2:2d:a0:04:10:11:5e:50:c3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Aug 4 02:01:17 2025 GMT
Not After : Aug 5 02:01:17 2025 GMT
Subject: CN=530411e529fcfca7e8b0f8787739f89fdea2f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:2e:a8:0f:6a:56:3a:85:a0:09:ec:35:47:
ca:12:5d:30:5b:5c:56:3a:ec:85:5f:34:ca:ad:47:
c0:90:dc:65:09:74:ff:42:23:4d:fd:bc:e6:e8:7d:
e6:47:7a:f1:39:b5:c3:97:de:91:60:96:e7:77:ee:
4c:bb:a1:3d:8c:51:13:7a:43:7d:0a:ee:c8:80:8b:
67:65:29:03:f4:a4:f6:10:d4:43:93:b9:e2:91:64:
b9:ac:c1:20:f5:07:f8:2f:fa:23:d3:77:85:0e:35:
1a:fb:67:5c:26:65:d3:3a:8e:c5:17:bb:b5:99:9b:
7a:e1:03:87:e2:22:49:84:60:63:53:34:ac:8d:b1:
02:38:b2:70:a3:4e:9d:fb:df:af:20:20:d0:c9:df:
e3:1b:c8:93:3a:ca:1e:e1:5f:d8:aa:bb:2e:2b:77:
95:ba:cc:a1:a7:92:71:34:64:1d:ef:fd:b1:47:21:
a4:df:2f:62:86:97:95:66:6d:0d:2c:8e:25:55:88:
97:77:db:b9:5b:c2:93:7d:02:c3:57:86:97:2d:17:
cf:59:50:00:cd:2d:e1:21:12:eb:29:c0:50:23:29:
ee:b3:05:af:28:d7:9e:b8:19:e3:08:27:35:47:79:
2a:58:dd:2e:29:52:ad:16:a5:96:6a:7e:2f:8b:e4:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:04:11:E5:29:FC:FC:A7:E8:B0:F8:78:77:39:F8:9F:DE:A2:F2:10
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b3:e0:b1:60:1e:b4:17:e0:43:cb:42:68:df:47:45:87:17:
24:4c:9d:34:1b:ee:93:19:72:84:46:e2:3e:e2:b2:e4:e9:ed:
5f:a0:32:44:81:26:8b:2b:b8:aa:16:cf:84:2f:f9:58:de:f4:
29:7b:11:58:96:01:8a:e8:55:10:2d:72:21:ee:ae:e4:a0:4e:
63:d4:c6:63:25:17:6c:25:c6:26:10:05:8f:dc:fb:d6:58:d0:
c3:4a:bb:e9:00:55:eb:36:1b:4a:a8:e9:46:37:1f:9e:b5:9f:
64:ee:e5:a4:e6:b6:e2:b9:9e:a2:2c:ad:87:4e:52:a5:56:b8:
c3:ee:ea:ea:66:9f:a2:f7:78:d5:ee:3f:c6:6a:78:a1:ac:e0:
e7:4d:34:e1:fd:6a:e6:e3:9b:a8:11:5b:80:8e:a8:81:38:36:
10:18:80:2d:9d:45:dc:82:3b:73:a6:c2:4f:02:83:2b:4f:53:
75:6c:41:51:28:8a:66:4b:68:d6:6d:e6:4b:8a:1c:76:aa:f8:
ae:37:5d:85:c0:4c:1a:1f:5e:49:5c:11:b9:59:dc:0e:39:e2:
f1:ae:d8:61:8f:89:c8:34:9d:83:94:7a:22:ec:d0:a2:36:8f:
39:39:38:8d:3b:82:97:3a:12:82:c5:8e:28:58:a0:76:8e:ea:
ee:12:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:20 2025 by rpki-client