Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: 98ZIQA/oX+d3TQ8XUXJneJQoIZSyX2ycjEQ5v6UXRK0=
Subject key identifier: 13:9C:6D:1B:96:74:CD:3D:23:C1:86:A2:02:62:21:A1:DF:ED:8F:6E
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 01989D4BA46C9172D64DAB937AA377094010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0A28
Signing time: Tue 12 Aug 2025 08:00:36 +0000
Manifest this update: Tue 12 Aug 2025 08:00:36 +0000
Manifest next update: Wed 13 Aug 2025 08:00:36 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 1cggqpFZAzpmJXVXncNWH5UG90KeWO/B6jOuD0wICLQ=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4b:a4:6c:91:72:d6:4d:ab:93:7a:a3:77:09:40:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Aug 12 08:00:36 2025 GMT
Not After : Aug 13 08:00:36 2025 GMT
Subject: CN=139c6d1b9674cd3d23c186a2026221a1dfed8f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:7b:26:25:1b:f3:18:21:70:1f:41:29:d9:
d6:6c:c5:42:ae:2a:28:07:b9:0e:05:9c:c0:51:8e:
26:9a:81:c4:7c:52:57:78:fb:d7:94:44:6d:55:a1:
3b:1b:af:93:88:17:1a:50:6d:97:da:68:6c:45:b9:
07:bf:f4:64:63:af:90:79:26:69:53:4d:8c:2c:07:
1c:8d:e1:3e:04:27:bb:54:48:89:39:0e:59:3d:ba:
b5:5b:c8:7e:87:f1:c4:00:c0:0d:44:fc:2c:a5:d8:
b2:94:10:1c:85:15:b0:02:b8:3d:b9:e3:1e:eb:6e:
fb:e3:d8:42:26:1c:04:c1:76:d8:30:9b:d0:d1:aa:
87:3c:ff:92:3d:1b:d2:18:ae:bc:75:83:71:ae:1c:
c3:ef:2e:b8:42:81:da:7d:92:c6:e8:9b:a4:b6:c2:
65:fa:cc:5a:95:4d:ad:93:e3:76:07:32:7b:c8:b2:
22:a2:44:c1:21:18:56:93:65:c6:53:c8:69:69:ba:
31:73:a5:18:5f:1e:db:3b:f2:a7:e3:75:ed:56:7c:
e0:b6:5e:92:6d:c7:9f:6c:9d:06:85:be:97:1e:c0:
4c:47:9a:0d:2e:61:cd:14:fd:c5:d1:99:f4:04:34:
1a:50:6a:e4:c0:3d:eb:bb:d7:81:12:53:fa:3b:24:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:6D:1B:96:74:CD:3D:23:C1:86:A2:02:62:21:A1:DF:ED:8F:6E
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:8d:d9:54:8b:32:a8:bd:00:9b:62:33:2e:ab:3f:76:4d:
a5:86:29:68:24:8a:62:8b:c8:42:e7:e8:91:a5:c6:e9:66:4a:
fe:d2:68:1e:56:50:85:ef:d2:f2:57:e3:2f:ab:0e:e0:1a:4c:
cf:af:9a:d8:46:91:c1:48:b3:e3:64:69:4c:9a:50:6f:1f:56:
93:5d:5c:ac:59:83:bd:21:44:6c:f0:26:e6:85:9e:91:be:66:
7a:be:7d:b9:a2:d0:41:dd:95:b1:28:3e:c4:32:e9:1a:a3:e8:
8b:6a:f3:1e:61:fc:f0:fb:af:46:70:cd:70:f5:a8:e9:c4:63:
39:c4:ff:8e:9d:39:7f:4d:4d:ac:9c:5e:34:b1:55:3d:0e:bb:
40:20:25:58:2c:46:6c:dc:1c:d1:da:47:0d:32:bc:85:e8:b2:
a4:a6:c7:e3:9a:2c:6b:48:c6:91:21:2a:5b:c8:c5:35:87:39:
dc:99:51:e1:0e:07:6e:40:74:8d:58:18:0f:b1:20:b2:49:f1:
8f:b4:f6:c8:c9:ed:49:4c:5b:ee:4c:19:2a:0e:d0:83:f6:f3:
07:d0:65:06:1a:63:5a:4d:ab:19:a0:db:b5:eb:fc:07:84:79:
10:00:2c:99:e9:b6:ab:7e:2e:e1:22:3b:c8:14:93:fd:7f:81:
e5:98:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:38:30 2025 by rpki-client