Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: KaGQIS+ZYFQRngV2LRibt0RJU47ZysRAvQ77Demtmg4=
Subject key identifier: 06:2A:9D:58:D9:DB:83:49:7F:A7:5E:C8:D5:77:43:27:7F:1B:BF:3B
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019879E400D8A28C78F788E53468A3A8F792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 0593
Signing time: Tue 05 Aug 2025 11:00:42 +0000
Manifest this update: Tue 05 Aug 2025 11:00:42 +0000
Manifest next update: Wed 06 Aug 2025 11:00:42 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: 0A67ICU3msJuZDq7kkYu8frOJQDN744FZDd7VkRmGqM=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:00:d8:a2:8c:78:f7:88:e5:34:68:a3:a8:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Aug 5 11:00:42 2025 GMT
Not After : Aug 6 11:00:42 2025 GMT
Subject: CN=062a9d58d9db83497fa75ec8d57743277f1bbf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:8c:d1:dd:9d:ac:b1:73:19:83:38:99:b8:
64:27:58:ae:67:cd:9a:0c:57:f5:1b:a0:18:9e:21:
1f:11:b0:dc:51:7f:9c:99:35:c7:83:58:32:b9:bc:
59:c3:5b:4b:e2:db:22:19:14:ab:67:a1:38:2e:96:
a3:5e:07:e6:11:c9:38:81:ef:2a:69:ce:d0:e3:02:
e7:f1:4c:b4:a5:1a:0d:89:da:18:9d:b1:17:09:cb:
0d:1a:e4:70:e6:e3:81:6c:c6:81:13:96:e4:8c:10:
b8:df:00:67:2a:2a:6d:46:09:20:8e:63:92:3a:f8:
9c:52:01:7b:49:ff:72:e2:43:b3:e6:94:0d:c8:a4:
61:0e:7f:7f:82:2b:9b:cf:54:ae:61:df:29:38:e4:
ba:7a:e3:90:27:51:35:ed:4a:34:5f:ca:8f:03:8c:
cd:b3:a0:34:ab:ff:74:14:95:d1:1f:e8:c9:9c:34:
94:44:37:f7:93:de:34:9e:ad:91:e8:9e:06:50:fc:
aa:77:f6:7a:31:5f:c5:87:80:8f:5e:bf:bb:43:6d:
2a:9e:40:37:ae:09:87:16:0f:ee:b7:b9:7f:02:1b:
eb:2a:d5:d0:29:f5:95:96:59:86:6a:4b:08:c0:d2:
12:4d:1d:10:69:47:83:cb:52:bc:12:3b:83:11:cb:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:9D:58:D9:DB:83:49:7F:A7:5E:C8:D5:77:43:27:7F:1B:BF:3B
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b6:74:c3:26:bc:47:be:23:02:90:06:b6:9f:16:c6:2f:ef:
d4:dd:2a:2f:e7:c9:ea:53:f1:c4:67:f3:cc:e2:5c:fc:82:a1:
8a:ad:87:ba:ee:59:b1:8c:a5:9d:1a:dc:88:99:5f:2d:39:da:
eb:06:ab:ae:1b:a7:8f:51:e3:e4:f5:61:99:81:d4:14:06:3c:
28:92:d9:46:0f:80:b6:57:8c:ad:3a:78:b7:47:19:14:70:d0:
82:b6:59:53:26:c9:d2:a4:43:19:b4:dc:74:8f:5d:23:0c:65:
c2:f9:f5:1b:c6:39:29:00:6e:cb:34:3a:0c:5c:03:da:e6:a1:
ed:ed:ba:53:8d:6e:0e:e3:d9:68:65:6f:2d:9b:68:3b:ed:34:
c1:e1:5c:50:96:66:30:2d:2a:cb:06:0d:6d:70:6e:39:7b:1e:
25:be:f0:05:5e:ae:01:40:ea:60:bc:48:d4:90:b0:f4:8e:a7:
a8:f5:b6:ac:f6:ff:c1:1a:85:5b:ef:d0:21:ce:ff:1b:d8:8a:
c9:2c:af:85:a4:1b:3e:26:b9:cb:65:fe:f1:09:cb:a7:06:56:
d7:db:fb:09:75:64:c6:7d:3d:8c:9b:e8:66:32:d0:5b:e1:18:
08:43:12:0f:f3:30:24:23:87:34:45:65:c8:d6:15:02:44:7e:
19:59:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:14 2025 by rpki-client