Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: JXvKhaU8rdqsYPRX2se6xBoFFdaUxl7DKugyO8jzFxg=
Subject key identifier: B6:C3:75:C8:04:64:D7:6F:EB:C4:C0:EE:95:C1:43:B5:CD:91:D6:C1
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01987306FC643984F2F1297612B0B850D9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0ACD
Signing time: Mon 04 Aug 2025 03:01:34 +0000
Manifest this update: Mon 04 Aug 2025 03:01:34 +0000
Manifest next update: Tue 05 Aug 2025 03:01:34 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: j7g6nCojuW2kq+xR908MRzO9jp327+O5UWKXAb5yiVU=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:fc:64:39:84:f2:f1:29:76:12:b0:b8:50:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Aug 4 03:01:34 2025 GMT
Not After : Aug 5 03:01:34 2025 GMT
Subject: CN=b6c375c80464d76febc4c0ee95c143b5cd91d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:27:15:ba:35:75:ae:dc:3a:41:15:32:55:
be:f9:ab:56:84:ce:7e:ab:41:8b:05:f9:f8:96:af:
e1:70:43:aa:d1:35:7b:00:e4:34:a9:01:17:a1:46:
7d:de:10:28:73:44:39:3c:a0:cf:49:2b:d3:2e:2d:
6d:ce:3b:41:26:82:b1:f5:5a:8f:ca:a9:56:a3:a6:
64:47:87:a0:38:81:d8:33:36:90:c4:8e:2d:4d:a2:
2a:79:ab:1d:2d:7e:be:02:f3:52:8e:21:a6:53:cc:
14:e4:3b:1f:c6:98:7c:cb:89:89:f8:5a:cd:c3:66:
33:f4:97:62:7d:6c:4a:a1:c3:2a:70:e5:db:0b:11:
13:e9:75:b9:fa:2f:4b:f8:22:64:97:80:8e:f9:ed:
3f:b0:21:f4:8d:f3:57:6f:e4:5c:c2:6c:9c:15:10:
57:70:a2:98:81:30:ea:d1:01:34:9c:50:be:87:9e:
e4:f3:a3:f2:da:98:bd:aa:ea:33:89:c4:cc:42:d5:
5b:75:a1:30:4e:7f:63:60:19:8d:6b:6c:ff:d9:f6:
7d:cf:e5:14:96:b8:6b:41:1a:d0:06:12:62:50:fa:
cf:21:c2:f1:5b:62:23:80:b1:f3:98:33:26:f5:e1:
65:e2:d2:a3:e8:2f:25:bd:e0:0a:81:26:c7:70:92:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:75:C8:04:64:D7:6F:EB:C4:C0:EE:95:C1:43:B5:CD:91:D6:C1
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:00:22:18:ec:31:75:9c:d0:2a:f2:39:dc:f6:a5:aa:1b:15:
5d:f1:7d:84:0e:84:6f:83:b8:26:39:46:e5:03:e6:73:ca:e8:
9a:b3:ae:5f:dc:30:a2:4e:ff:d4:66:d2:3d:1d:d1:7f:1d:5a:
5c:ed:27:d1:67:58:bd:0d:9f:c0:ad:3a:21:01:29:e7:fc:df:
cf:77:9b:f4:f2:c1:ba:85:67:2e:24:4c:28:4f:f2:b9:cd:16:
ca:1d:f9:ba:08:0d:a4:a7:6a:ac:ab:08:17:a6:e4:b1:ff:89:
bd:72:8a:82:6e:3d:f8:92:d1:0b:76:43:54:c1:9d:b7:fc:da:
ca:6a:71:3a:ff:64:97:e3:07:5d:11:f8:ed:2e:0b:48:c6:8a:
8f:ef:af:0a:2a:d7:f4:3c:0f:2b:49:41:e5:1e:d6:e5:6e:79:
dd:90:d2:05:fa:90:4b:e4:27:44:40:df:3b:9a:7f:92:1e:86:
29:74:c5:ca:11:13:6d:63:53:9c:07:f3:f8:16:68:42:13:52:
a4:fb:82:12:ef:f3:04:76:74:ea:a6:08:ce:37:56:5a:aa:16:
92:27:76:23:1b:2f:b4:2b:92:6a:08:f0:10:69:6d:12:db:b0:
72:42:48:72:35:09:54:61:0a:b8:88:a6:aa:b3:9e:b8:10:42:
6a:59:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:12 2025 by rpki-client