Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: nn+tH9t4eUv1/F+lMAZcb+H8GzTf8rvXmkzNkp6FwHk=
Subject key identifier: F7:14:D2:79:5B:B0:6F:C6:62:BE:87:64:58:4B:FB:76:71:5C:69:07
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 01987ABFCD4EA8908990BC04347F58F8BCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 15B5
Signing time: Tue 05 Aug 2025 15:00:46 +0000
Manifest this update: Tue 05 Aug 2025 15:00:46 +0000
Manifest next update: Wed 06 Aug 2025 15:00:46 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: NjH3MeZQDGQKURVoUGDs7/1MkKNkP+e55HSqUrziGOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:cd:4e:a8:90:89:90:bc:04:34:7f:58:f8:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Aug 5 15:00:46 2025 GMT
Not After : Aug 6 15:00:46 2025 GMT
Subject: CN=f714d2795bb06fc662be8764584bfb76715c6907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:a9:55:a1:bc:1c:3a:7f:15:b0:44:5f:51:
ee:0e:85:ad:aa:a3:c1:1a:82:ae:cf:e6:d1:bf:11:
56:35:0e:2f:f7:b5:ba:98:40:d5:c9:82:82:8c:ad:
d3:9c:96:f6:62:e2:32:9a:56:c4:0b:ab:30:1a:9d:
fa:66:8e:3b:32:54:17:ab:cf:a9:0c:aa:fb:c0:b2:
6c:89:e8:e0:68:3a:6c:94:85:89:4f:f8:59:e2:c5:
a9:13:9e:4e:3c:29:d1:d2:d5:3d:04:a9:5a:bd:65:
8f:27:47:bb:3b:00:e2:4e:a2:9c:0d:e7:9b:61:ad:
62:89:b5:47:57:46:f3:20:8b:6a:a8:ae:7e:e2:b8:
db:23:dd:28:18:7c:b6:22:2b:03:62:fc:f9:ee:5d:
e8:3f:27:fa:7b:ba:ff:73:f7:07:5c:1b:36:e3:c8:
c3:96:f5:66:72:a6:04:e5:02:4d:28:f5:48:7a:5f:
51:cf:5a:be:46:b8:5b:e9:46:81:a3:c9:5b:00:3f:
5c:eb:c0:0d:ea:84:85:fb:26:4b:75:36:b4:5d:86:
12:36:8a:f8:f7:42:21:3e:d0:ed:87:2c:e2:1f:70:
a2:47:08:b3:8d:9f:cb:30:dc:d6:48:b6:3c:7e:f3:
f2:d9:17:53:60:46:a6:ea:1b:60:d3:c0:56:7e:d7:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:D2:79:5B:B0:6F:C6:62:BE:87:64:58:4B:FB:76:71:5C:69:07
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:a9:98:7f:26:f8:98:d5:d2:4e:fd:bd:51:70:f1:2b:9f:
a8:db:28:94:39:53:85:a4:c9:cb:7f:0d:e8:27:84:67:a4:51:
6d:78:a5:a7:02:8d:10:cb:d5:b3:3e:37:d1:3f:d1:8a:6c:d6:
6c:02:ad:44:bb:9a:3a:1c:f9:4d:3b:58:8e:86:e1:b0:20:10:
04:e3:95:53:9b:1c:56:9a:35:9a:11:85:01:2a:0c:03:35:e6:
61:5f:44:bc:fa:4a:e7:06:3a:33:36:8c:f7:9c:1d:c7:74:f6:
0b:23:0a:69:a8:f4:67:a1:a5:42:01:92:06:40:10:30:e2:ad:
8e:74:ca:73:c2:73:c5:e2:39:16:22:65:fd:c7:2c:10:0f:b8:
d3:3b:25:1f:4d:1a:d2:42:39:6b:40:40:e8:fa:ee:71:f1:64:
09:65:e5:d1:9c:02:5e:e9:34:b3:1d:4f:4e:89:de:14:7a:bb:
3d:a2:1e:03:f1:01:aa:ca:c1:e7:ad:0d:d9:24:45:9b:0e:81:
19:db:58:6e:11:bb:34:d1:41:fc:5d:d7:97:99:ca:4f:bb:46:
1e:ec:4b:4d:42:35:ad:9d:40:15:9b:04:11:55:21:a5:96:08:
ea:7b:10:4b:8d:9a:1b:b4:16:72:32:0e:ea:dd:85:95:71:80:
f0:55:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:18 2025 by rpki-client