Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: eXRaBSJ5KAVk89uFboftDzk0lGialJG3kZUy/jMuWKI=
Subject key identifier: 46:8E:F3:56:BB:0A:E1:91:B5:79:CC:69:72:D0:F1:14:18:C8:CE:75
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 019874191885000248C2B1714600978B69F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:00:58 +0000
Manifest this update: Mon 04 Aug 2025 08:00:58 +0000
Manifest next update: Tue 05 Aug 2025 08:00:58 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: T1xS0ICHh9ogJfoTFO1xdy4q5S2kwcqCMdb+R3zm0B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:18:85:00:02:48:c2:b1:71:46:00:97:8b:69:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Aug 4 08:00:58 2025 GMT
Not After : Aug 5 08:00:58 2025 GMT
Subject: CN=468ef356bb0ae191b579cc6972d0f11418c8ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:4d:a7:30:3e:51:82:ed:3e:58:55:1a:bc:
cc:aa:a0:7f:48:bc:a5:90:40:62:f7:21:03:b0:61:
d7:34:30:8d:e7:ef:e4:c2:c7:c3:ae:a3:a4:e5:af:
fb:b7:a7:55:e3:64:26:d9:91:89:19:79:98:42:9d:
19:a2:c4:6c:9f:ab:6d:a6:61:fd:68:2d:5d:4c:67:
05:b4:82:b2:ce:07:da:7c:ed:e9:d4:4e:1e:65:50:
d3:af:77:89:b0:95:18:8e:f9:cd:58:9d:d9:4c:db:
7b:68:88:d8:4a:90:a9:89:30:83:b2:ce:87:be:44:
23:bb:19:16:b9:ba:6f:5e:7e:89:9d:d6:44:64:0f:
58:ee:64:80:a5:c0:f5:5e:74:c2:e9:1d:db:5a:35:
d7:3e:4c:c4:82:64:d9:6c:25:a2:ed:95:95:ef:0b:
68:49:74:e9:a8:43:eb:22:a1:5f:57:e3:4a:27:51:
52:cf:0c:c6:68:27:ca:0e:7b:0c:fa:84:9c:99:a3:
da:9a:04:bb:8b:91:d7:a3:e3:41:f7:e8:cd:3a:60:
33:65:a7:64:8d:6f:f1:c6:63:ab:15:44:bb:b6:7e:
9d:fb:25:21:11:9f:1f:85:44:51:80:93:3a:c6:74:
d2:82:3d:4c:dd:84:19:30:5e:e2:ff:cf:31:45:9e:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:F3:56:BB:0A:E1:91:B5:79:CC:69:72:D0:F1:14:18:C8:CE:75
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:fc:6a:c7:f2:cb:ff:30:14:8f:02:c0:d2:d2:a5:e8:7b:
57:7e:7e:e3:18:0c:95:d3:53:c0:9e:65:b0:1d:ba:67:e0:33:
1a:c1:63:c2:55:34:09:f3:4d:b5:f5:ac:2c:31:dd:34:c3:33:
f6:5a:49:bb:aa:9e:3e:67:b7:9e:7d:5c:16:b2:12:c3:bf:31:
0b:5a:98:b1:a2:59:23:9a:10:cf:c3:5e:f8:42:f9:4b:02:db:
4d:f3:57:9a:78:4f:f8:6e:e0:89:b4:2c:b5:3f:60:50:98:10:
52:01:b4:bf:70:63:b0:e8:9f:bf:a7:47:cb:c2:1f:47:b8:39:
8f:c8:ad:62:9d:09:e2:b0:a6:07:ea:0c:ef:0a:14:7d:b9:04:
5b:c1:9e:7a:e0:d2:a0:4f:41:43:5d:93:ff:55:5c:6d:33:be:
aa:ce:6d:b1:f9:2c:59:26:c2:33:d8:98:bd:9e:8f:92:d9:8a:
ea:16:f4:14:94:22:47:18:3c:e4:1a:01:fb:e0:39:f9:de:8e:
e4:7c:1c:9a:b1:47:70:9f:84:51:42:99:58:1c:de:fd:49:0b:
0a:70:0c:e4:48:9c:b1:09:af:ce:e6:f8:54:32:11:bc:15:82:
c1:18:63:f5:92:ff:4c:19:fa:0b:75:8d:27:ff:3b:fb:34:99:
d4:70:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:13 2025 by rpki-client