Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: c2DzmUT0/Y4R9dB6ulAd0g9XZ5mKLk+Jl1qq7c6X2BI=
Subject key identifier: F1:BD:D0:17:F8:CE:43:2E:6A:FE:85:64:6E:82:09:08:F8:37:71:E6
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019873E2CA13A9E129173F1ABB878DAA5799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 12D1
Signing time: Mon 04 Aug 2025 07:01:39 +0000
Manifest this update: Mon 04 Aug 2025 07:01:39 +0000
Manifest next update: Tue 05 Aug 2025 07:01:39 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: aFiKQ0/7wukGM8hsx82gs+SQzNsyKBUQDFlzqrLQt8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ca:13:a9:e1:29:17:3f:1a:bb:87:8d:aa:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Aug 4 07:01:39 2025 GMT
Not After : Aug 5 07:01:39 2025 GMT
Subject: CN=f1bdd017f8ce432e6afe85646e820908f83771e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:0a:2c:38:9f:4b:e5:20:2b:3f:a9:78:0c:
fa:f9:b9:7e:86:53:08:be:b9:90:26:f4:e1:52:b6:
ee:2f:6c:dc:8c:a7:53:d2:12:44:b5:82:ca:8a:78:
96:7d:be:da:e1:e9:9b:7d:d6:42:0a:4c:d5:cb:f6:
54:a4:42:2c:18:35:b1:e1:74:a2:26:e8:f5:f3:b9:
93:35:3f:81:7c:d3:dc:32:71:43:18:45:eb:ef:3d:
38:c7:2a:31:07:4f:43:cd:f7:82:12:a0:d0:37:ac:
10:ff:20:38:2d:9a:18:87:d7:b2:e8:b5:2d:3c:d6:
9e:bc:0c:71:94:6d:47:6d:2e:88:b7:9d:61:e8:f9:
f0:43:83:78:7c:cb:45:1e:f0:5d:c6:b5:bf:38:2e:
b7:ce:15:d0:f4:38:35:05:2f:fe:24:47:58:8e:4a:
9c:10:a1:51:05:ba:f5:8e:f4:71:c2:88:0a:0d:35:
86:79:dc:53:d9:9e:ee:fd:39:5b:8f:44:a6:76:a1:
03:14:fd:4b:13:a5:fe:96:94:14:3d:dc:f7:c9:09:
fc:eb:3c:e8:e8:fc:05:dc:38:e7:95:24:1f:7d:c8:
64:e0:71:16:25:2e:b8:ce:81:71:23:06:a7:60:2d:
d5:98:6e:57:83:47:91:a3:13:23:60:31:c0:c0:93:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:D0:17:F8:CE:43:2E:6A:FE:85:64:6E:82:09:08:F8:37:71:E6
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:07:af:e8:c1:fb:ea:84:41:f2:ac:91:b3:52:3a:0d:b2:bb:
0c:7d:8f:1c:df:bd:80:a7:6d:d9:b9:d8:f8:14:a3:41:86:40:
60:79:4d:2c:22:2b:a8:c3:d0:23:ee:f3:8e:88:d2:f2:ad:eb:
ae:8e:00:f2:8a:93:b1:c8:85:1e:ec:56:4e:b9:e0:d0:38:3e:
e1:35:f4:6c:90:c8:71:ab:14:84:c2:af:c7:18:2f:49:34:ff:
11:d4:78:c5:cd:c9:84:b0:d1:d7:71:d4:61:7a:2a:92:32:f8:
58:1d:44:f2:77:4f:01:86:b7:65:fc:a0:a9:1e:38:05:8b:fe:
d0:dc:09:17:5b:69:e8:57:a5:f9:dd:36:20:71:b6:59:06:65:
a0:6e:79:5e:d9:97:c0:41:55:28:71:c3:7e:0e:91:40:8b:5b:
24:39:d7:81:99:cc:ea:d6:91:e5:03:b2:a3:3b:0b:9b:57:40:
68:f9:ab:8f:c6:cb:f1:13:8a:92:cf:98:d6:ad:42:80:4c:d9:
fa:9d:41:26:52:59:77:67:f5:21:51:18:f2:4a:e0:36:76:42:
e9:0b:ed:68:fe:cf:a9:b8:cc:4d:c2:a8:58:86:a2:dc:eb:6a:
33:86:d0:9d:45:e8:99:cc:53:a2:d3:d7:2b:ba:80:f9:27:9c:
c2:d4:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:12 2025 by rpki-client