Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: 1iDiOMlBK2bT8zmT8i8DImAhYS4n2UvuBus/sMAi118=
Subject key identifier: B6:3A:78:72:B3:96:D8:44:84:0B:E7:A9:EC:10:1D:95:0B:E5:F5:78
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019890DAC3AD12467F2E1082BF315922DF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0F92
Signing time: Sat 09 Aug 2025 22:01:52 +0000
Manifest this update: Sat 09 Aug 2025 22:01:52 +0000
Manifest next update: Sun 10 Aug 2025 22:01:52 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: IDl17GdjYkIzuM5YWIneojzmtjmjghJIZhxS2+AVnpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:c3:ad:12:46:7f:2e:10:82:bf:31:59:22:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Aug 9 22:01:52 2025 GMT
Not After : Aug 10 22:01:52 2025 GMT
Subject: CN=b63a7872b396d844840be7a9ec101d950be5f578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:3f:7d:67:0f:7d:b4:44:e8:c5:1b:41:a9:
e0:06:5d:3e:e9:fa:5b:1a:c6:34:85:b2:2e:dc:23:
97:11:a1:f2:5b:db:f1:1c:67:ff:4c:ee:b3:ce:72:
02:76:53:c8:fe:e9:22:77:45:04:06:ee:96:1d:7f:
63:82:e7:7c:60:cb:f3:21:80:ae:b7:46:67:e1:11:
a5:2f:73:96:04:09:11:1b:ac:65:9b:e0:66:47:7e:
d6:94:f7:25:e5:9c:d6:00:64:ee:a1:38:84:85:66:
c8:f9:d5:e4:91:63:90:51:ab:1c:55:f2:c1:90:63:
39:7a:fb:8c:21:8a:60:8c:a1:fb:8b:2f:cd:6a:85:
15:44:5c:62:97:f6:bc:07:fa:db:b0:72:58:a5:41:
06:83:59:11:ed:1d:53:7f:70:93:d4:e6:97:ca:40:
40:30:50:a8:17:30:76:76:0d:8a:b5:67:bc:80:e6:
26:ff:e8:f2:04:58:77:b1:30:00:78:76:42:5c:a4:
90:ad:28:74:35:55:e4:c4:4d:d3:7f:a1:8b:f7:63:
1b:e6:e2:2f:37:c0:ca:09:1e:05:66:4c:58:0c:9b:
ab:bb:f2:c6:7f:05:c8:1e:65:ba:b4:d9:ff:2c:5f:
4c:5d:da:f1:16:90:07:15:2c:39:60:eb:d3:b3:9f:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:78:72:B3:96:D8:44:84:0B:E7:A9:EC:10:1D:95:0B:E5:F5:78
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:e0:33:91:62:63:c5:96:ff:89:16:75:56:7c:c3:db:04:
a7:d5:09:47:ec:0f:75:17:55:fb:42:fb:40:97:8c:aa:f7:ee:
0d:a7:1b:35:36:64:ed:ba:0b:91:49:b7:3f:0b:bf:f0:15:98:
d8:70:b0:24:56:60:e6:63:91:b8:d2:49:d9:55:da:22:78:43:
5d:d5:3c:ed:16:94:b8:00:7b:11:b9:35:c1:f9:4d:03:de:dc:
69:94:ba:f3:e5:55:64:42:71:57:70:5e:e3:6e:57:47:d2:1d:
69:36:68:f7:31:fe:ff:df:9a:d2:2a:9d:16:98:18:22:5f:0e:
1a:e3:23:3b:36:a6:65:e1:96:be:19:df:32:00:fd:e8:12:da:
ba:da:da:cf:e6:93:35:f2:27:3c:3e:6d:ba:e4:33:5f:bc:ad:
7b:03:7a:1e:dd:1e:ed:30:b5:ce:2a:53:47:6c:00:67:99:c3:
d6:82:1e:45:4a:a3:36:1e:18:c2:78:2b:0c:63:86:c8:cd:94:
06:26:14:2b:5a:8b:ca:2a:22:5f:52:9b:19:09:24:8a:f6:a2:
47:ce:ca:61:2a:93:3a:ec:8b:10:87:ac:9f:a4:e0:e5:d8:a5:
54:93:d8:95:fc:29:d2:b1:12:8c:9c:e5:bf:50:c0:8a:f1:7c:
d2:53:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:49:32 2025 by rpki-client