Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: GBkNn6vtsJ1Znd8AZkZXgQ0AcbqmMdeTWSBYPw5YPQM=
Subject key identifier: 71:76:D5:B9:8C:89:B2:BE:49:D5:94:DC:A2:7D:F0:59:89:54:00:1E
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 01987C77CC66F331A7C35105F7EF63568D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 23:01:22 +0000
Manifest this update: Tue 05 Aug 2025 23:01:22 +0000
Manifest next update: Wed 06 Aug 2025 23:01:22 +0000
Files and hashes: 1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: ZpAusOcvw5rA0tLOk2uwoBjCLdyW66axsV4MazxiCgg=)
2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:cc:66:f3:31:a7:c3:51:05:f7:ef:63:56:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Aug 5 23:01:22 2025 GMT
Not After : Aug 6 23:01:22 2025 GMT
Subject: CN=7176d5b98c89b2be49d594dca27df0598954001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:36:f4:2f:b2:dc:3d:f7:1f:9c:50:9a:b1:
0b:2e:17:7a:55:b2:7f:23:e1:c9:d4:cf:39:61:bc:
f4:ad:f5:63:12:f6:87:03:1b:02:fd:5e:d9:67:2b:
e5:b2:d1:59:39:fe:96:60:19:d6:42:bc:36:25:37:
25:a0:1c:71:f4:43:d1:8a:fe:c4:5a:59:76:1c:a6:
db:3b:b6:e1:fd:7c:e9:93:be:81:e7:c5:e7:8c:0b:
3a:60:05:8a:e9:92:32:e2:90:33:4f:9e:d5:73:cd:
d0:02:ab:30:71:73:b1:3a:e7:25:2f:f1:e5:77:c4:
c2:a3:b6:cb:ee:73:d7:7e:98:76:00:63:ec:20:52:
06:44:3d:9d:a3:50:48:2c:a6:d4:89:8c:c3:17:26:
32:64:93:ff:97:f8:6a:05:51:8f:f7:d0:57:7d:ee:
7c:cf:6f:bf:de:54:c2:6c:87:cf:22:ab:d5:1f:97:
d8:70:08:cc:43:d7:19:d9:0b:03:2e:a8:a8:0a:d9:
ed:17:c7:c1:28:0e:38:10:7f:d0:49:7a:3a:69:dc:
49:6b:ce:83:fb:30:ad:26:89:71:4d:a8:5b:88:b5:
aa:ba:60:f5:b4:63:9a:89:3a:5c:ed:fb:28:d9:2a:
26:64:cb:bc:03:af:49:f4:2b:8e:7f:34:fb:6f:b1:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:76:D5:B9:8C:89:B2:BE:49:D5:94:DC:A2:7D:F0:59:89:54:00:1E
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1a:bc:9b:2b:30:94:97:a0:67:3c:24:28:ec:85:5c:ae:58:
d2:9a:e2:c7:2d:c3:4a:98:c0:a8:04:44:57:14:69:8f:1b:db:
de:e8:c4:3f:f8:ef:9e:f2:e7:14:65:54:58:a6:18:3e:fc:6c:
02:f3:9f:6b:c0:90:66:f9:c0:df:62:18:77:e8:f4:5e:10:b2:
a2:66:16:3a:35:04:43:a2:35:29:1f:1e:bf:f0:81:76:12:5f:
26:c9:67:da:d9:37:78:e0:20:57:96:65:c2:e7:a3:aa:2d:ce:
ca:d9:c3:31:db:56:11:a9:f8:14:0d:60:25:24:0a:8c:1a:e0:
36:7c:8a:73:ac:80:73:9b:03:15:4e:7f:40:1e:70:1d:b9:85:
4f:64:2a:ef:0c:49:bd:fc:21:60:ac:47:f8:06:78:6f:c0:4e:
8e:0d:4e:d0:e5:23:a1:c0:63:84:87:31:51:32:53:bd:ec:35:
a9:0c:16:3d:22:cb:cc:d0:ea:68:64:3f:30:a5:90:72:a8:f5:
cc:38:0f:ca:32:80:07:f0:64:3a:fd:9b:3e:64:bc:35:6f:83:
9a:d5:3d:11:68:58:3d:4d:93:1a:81:af:86:d3:80:3f:9d:6b:
af:3c:a2:3a:c6:79:ff:d8:d7:c5:86:f7:0f:22:49:93:b5:11:
d4:98:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:41 2025 by rpki-client