Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: 80TKcnZPigvgGUdnNqUp2xe4d0vW+rFMoUosWeyz78s=
Subject key identifier: 52:C3:3D:77:8A:77:1A:03:A7:3F:F1:3D:7A:F5:B3:75:14:8A:25:82
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 0198820C0ECB3AC121A376251CB27DEE5EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 12DE
Signing time: Thu 07 Aug 2025 01:01:24 +0000
Manifest this update: Thu 07 Aug 2025 01:01:24 +0000
Manifest next update: Fri 08 Aug 2025 01:01:24 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: QE2+JHt0pMYCHGR1Kp6lAvTys14KWhgfFglsIKUPYUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:0e:cb:3a:c1:21:a3:76:25:1c:b2:7d:ee:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Aug 7 01:01:24 2025 GMT
Not After : Aug 8 01:01:24 2025 GMT
Subject: CN=52c33d778a771a03a73ff13d7af5b375148a2582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:9e:88:68:16:ac:ea:64:b0:95:bc:ca:3f:
11:58:cb:8b:55:5d:c5:37:4b:80:51:90:16:89:9e:
55:aa:59:48:2b:82:93:9a:58:98:d1:4d:99:39:c9:
d5:79:95:df:3f:3c:09:3e:6d:a0:67:97:32:f5:c9:
59:3f:fe:a9:1a:fd:40:66:fd:83:62:65:d6:64:15:
0a:5b:82:6a:89:30:d6:d1:90:68:f0:85:04:45:2d:
48:8b:4a:8b:4a:84:bf:5f:75:b2:61:31:a7:fc:2c:
80:e3:47:63:0f:28:2e:11:8b:5a:ff:6d:1f:9a:38:
5d:75:dd:6e:53:c5:49:ee:9c:6f:30:8a:1b:63:98:
4c:2e:05:b3:62:00:bb:bc:05:83:13:2b:ef:5b:be:
38:5b:96:ba:ef:c0:da:07:32:1c:09:79:ba:a6:c1:
6a:9a:c7:91:38:25:1e:21:42:1d:5f:32:b9:df:63:
a5:33:32:02:9e:27:8f:8a:bf:83:e4:bd:66:ef:90:
82:89:3d:99:4f:0d:84:4b:83:e1:b0:6f:ca:22:46:
82:5c:0b:45:56:87:2b:c4:bf:3b:d2:a0:87:6c:05:
b5:94:c0:95:1a:2e:84:79:f8:6b:fa:cc:31:a1:61:
ad:2f:45:75:3e:c2:11:99:75:98:3e:27:0f:90:4b:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:3D:77:8A:77:1A:03:A7:3F:F1:3D:7A:F5:B3:75:14:8A:25:82
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:17:37:28:00:2e:e5:00:08:55:88:47:b7:d2:57:c5:11:
bf:72:ef:75:79:88:e8:67:4d:24:12:7a:d2:95:da:cf:67:9f:
a0:9e:a5:7c:07:17:a9:75:c5:20:37:b2:4a:c7:87:00:de:35:
22:a0:66:3c:13:e0:3a:81:27:70:6d:be:44:68:99:6c:e0:6c:
de:4c:16:5a:13:74:94:64:99:b9:54:0e:9e:8b:d6:9d:96:c4:
47:9a:22:6f:58:bd:27:de:80:d2:df:c2:c4:e9:fb:f9:07:c0:
c8:a9:0a:22:1d:2d:9b:8d:a2:10:39:ec:6d:c4:50:75:72:48:
ca:7e:b8:52:a2:0a:19:1b:9d:ad:a2:dd:da:bf:06:c1:15:0e:
93:f2:5b:df:00:d6:e0:0f:b3:5b:f8:36:2d:65:64:8b:98:17:
1d:73:cb:8b:6b:e8:89:ef:bf:e9:5d:a4:a7:f6:3c:1a:62:da:
9b:87:f5:2b:23:93:30:b7:4c:a1:8e:b9:d7:75:74:bc:0e:21:
98:04:7a:5c:ed:c1:1b:9b:6a:cf:5a:7b:94:63:77:74:15:8f:
0a:69:7f:0b:34:c3:44:5e:71:35:b9:7f:49:f5:8d:31:55:97:
a8:04:3b:b6:64:6d:59:15:ea:93:d2:82:d5:d4:1b:86:7e:df:
5f:c1:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:06 2025 by rpki-client