Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: lnuyUdPrRf2UYDzdtTToV7QBCrmAnQOGclI1UaT6jO8=
Subject key identifier: 4A:7B:E7:1B:94:29:19:D4:D9:0E:BA:09:E3:17:47:FE:B8:4C:D5:42
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 019885441EDA55D9E248B82436FC131F7773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 138D
Signing time: Thu 07 Aug 2025 16:01:30 +0000
Manifest this update: Thu 07 Aug 2025 16:01:30 +0000
Manifest next update: Fri 08 Aug 2025 16:01:30 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: yxUB5omEGMVLu6MUjvGzKVUt7WLd6Ffm2auWjXGgmEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:1e:da:55:d9:e2:48:b8:24:36:fc:13:1f:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Aug 7 16:01:30 2025 GMT
Not After : Aug 8 16:01:30 2025 GMT
Subject: CN=4a7be71b942919d4d90eba09e31747feb84cd542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:5a:e2:a8:9d:87:b1:49:bf:a4:dd:7f:7b:
eb:45:a1:24:9b:2c:f1:23:2b:2f:43:d0:79:72:4e:
cb:c5:50:90:f6:bd:15:23:5b:f6:f1:96:b1:1a:30:
26:97:8a:d4:06:05:7f:0a:a3:7e:05:d1:31:2a:d9:
2e:2b:46:24:57:f2:75:f8:a8:01:3b:2b:d0:ee:95:
df:b1:cf:88:9e:e6:eb:5c:c4:ce:eb:cf:f6:1e:88:
ae:50:50:10:52:d5:d2:62:aa:b4:c9:7c:de:8a:eb:
35:59:93:a1:4a:e7:63:c0:90:15:9b:26:07:5b:c6:
28:85:67:19:6e:68:92:95:aa:c0:ce:c5:86:d9:c5:
1d:1b:d5:82:5d:0c:c7:97:eb:f7:6f:20:8e:8c:e7:
89:cd:f5:1d:00:6b:a5:b4:53:9f:d3:df:ac:ad:fe:
3b:59:88:e7:0f:fe:d5:87:fe:47:9d:05:ff:d2:f9:
ca:98:76:d7:06:2a:49:30:49:71:9e:22:33:12:7e:
1e:95:e1:4e:7e:86:90:03:15:da:e2:52:1b:ed:d4:
c5:88:52:c6:e7:33:d0:4c:5d:a3:7a:b9:6f:18:8d:
aa:8c:60:6f:51:7f:7d:ba:cc:8f:75:3e:91:ff:14:
1f:7a:6e:29:e5:47:55:3e:26:4c:17:07:c2:61:14:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:E7:1B:94:29:19:D4:D9:0E:BA:09:E3:17:47:FE:B8:4C:D5:42
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:66:de:bd:11:4b:97:3a:84:21:bc:46:3f:5e:e4:42:71:d1:
71:3d:e1:c5:87:85:8c:82:31:00:0a:f9:bf:52:83:6d:6c:6a:
30:a1:a4:ab:95:24:a4:ab:a3:00:20:0f:04:22:87:79:60:48:
96:d4:04:0e:5b:7e:c2:b9:36:68:32:b5:ca:85:59:32:25:27:
0a:a2:47:38:9b:a7:31:a9:22:fe:7c:3e:e2:d6:cc:6d:9a:68:
48:a4:27:4e:04:92:fa:c6:6b:49:c2:14:d1:17:ac:2a:d1:80:
6a:80:14:a3:c6:4d:51:72:cc:e6:8e:9d:b1:dc:52:6f:67:6b:
39:91:8d:f7:63:08:02:64:74:1e:e0:ac:8d:fb:db:49:e4:f1:
53:0a:d4:a0:75:d2:e8:e6:8f:c4:aa:bb:d6:cb:95:eb:a2:ba:
42:39:bd:c7:e8:e8:27:17:e8:4f:a8:43:dd:01:78:c5:7a:32:
30:62:d0:ed:0a:d2:d1:50:45:2d:e9:9d:f0:2d:97:fe:3d:14:
c4:18:9f:3b:0f:ee:ca:d1:11:19:95:c2:5b:e4:c4:c7:ff:6e:
3f:9a:ef:9b:13:46:f0:74:7f:d7:49:13:f5:2f:f6:69:c5:05:
ae:d3:6b:ea:84:48:c6:af:bd:29:84:dd:43:fa:a8:ea:e5:d8:
ff:20:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:52 2025 by rpki-client