Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: 7KPcEDvNDjkB9ixpcyIHzuTd1zGX/yy+BXzd/E+slyY=
Subject key identifier: 0B:3D:80:1D:DA:3C:B1:26:CA:16:00:40:68:93:F2:C8:62:7F:16:7C
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 01988D33C198B4DD9468854ABC03D848D58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0C71
Signing time: Sat 09 Aug 2025 05:00:36 +0000
Manifest this update: Sat 09 Aug 2025 05:00:36 +0000
Manifest next update: Sun 10 Aug 2025 05:00:36 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: S61Rz+R8we1eDbI67iRGoa0r3B51LwMAVVFEF3vQlrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:c1:98:b4:dd:94:68:85:4a:bc:03:d8:48:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Aug 9 05:00:36 2025 GMT
Not After : Aug 10 05:00:36 2025 GMT
Subject: CN=0b3d801dda3cb126ca1600406893f2c8627f167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:4c:10:58:57:2b:bb:bf:4d:a9:b6:b1:d5:
04:00:b4:92:31:9b:db:3f:7b:26:cc:f0:da:d1:01:
f1:f2:2f:9d:d7:78:c8:fd:77:80:b6:57:82:35:03:
b0:d7:13:e8:ee:14:c7:89:34:5a:d0:1c:2f:b4:41:
43:58:63:fe:4c:a2:78:4c:b0:0d:6b:b5:a8:74:0e:
50:28:b2:2c:74:b5:38:d3:72:ad:6c:3c:14:87:7c:
f7:a8:59:26:58:cc:1e:06:7e:ed:70:48:8f:b7:69:
5b:49:22:73:0a:8a:89:4d:87:d3:22:7a:9b:90:03:
f3:4b:13:e4:88:09:e4:ef:19:db:81:77:40:63:57:
c5:9d:db:c5:39:15:7e:e2:93:fa:4a:ac:1d:e7:dd:
9d:4a:48:8f:9a:8e:83:b5:b8:66:f6:8d:bf:da:b2:
74:74:b2:c1:96:ce:02:2c:03:25:7b:8d:b4:62:ba:
11:5b:05:46:ef:55:4a:37:f5:5f:42:11:95:cc:2d:
9f:03:01:71:aa:06:e0:0d:1f:a0:b5:b8:12:ff:43:
47:f0:8a:9a:3c:b7:45:51:58:5b:68:e6:93:86:cf:
d3:0f:6f:e5:b2:49:ff:92:de:f2:72:a2:47:05:96:
7c:fc:38:42:8b:3e:f0:3e:b3:6e:29:ad:a8:5b:5b:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:80:1D:DA:3C:B1:26:CA:16:00:40:68:93:F2:C8:62:7F:16:7C
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:de:c3:ee:c6:10:ff:e3:d2:a5:e4:af:d5:83:ea:f5:73:93:
9f:3a:a1:a6:28:9f:c9:6d:ee:dd:74:e0:c9:54:73:0c:02:93:
a0:12:28:76:99:d8:46:f4:35:d0:62:d6:5b:35:05:8b:8f:0b:
2f:e5:11:cd:ac:96:5b:75:c3:c1:94:7c:33:6b:94:56:24:ee:
f0:05:8c:92:39:e8:a3:54:a7:5c:d5:85:86:20:22:08:c7:fc:
b9:2a:6c:5c:bd:6b:ee:0b:db:54:95:77:0e:8b:b4:13:31:ce:
03:8b:0f:75:02:2f:04:1c:b1:0d:0b:62:2c:ac:ce:8c:d0:26:
83:b5:4f:db:79:04:8d:01:7d:0d:d4:0a:47:56:22:2d:c9:49:
9f:4d:4d:02:16:4e:16:9d:cb:20:4d:13:84:56:2c:92:22:98:
28:fe:f1:b4:cd:79:07:cc:a7:b9:26:08:1b:9a:db:48:c1:5f:
37:b7:3d:57:92:21:44:08:35:b9:f2:12:43:d6:31:3f:9a:95:
62:f1:76:3d:49:30:52:d0:e5:c1:5f:56:cf:f9:89:a6:5f:19:
49:80:20:e6:e5:42:b4:56:8f:8a:1c:4f:c0:bc:ef:0e:1a:db:
8d:63:73:0e:f1:f4:a3:15:ea:a4:65:be:ac:e2:b4:34:80:c3:
c0:be:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:32 2025 by rpki-client