Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier: yiuCARCnBWXUnJ2nLwmO/0HLwpaJZWTF8fhRVuoHsYw=
Subject key identifier: C4:5D:B1:86:AC:A6:6E:A8:A5:7A:6E:E7:FD:8F:32:6C:F7:70:38:47
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 019896A53448DBD88E0E0F5D1A954AFBFBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number: 01AB
Signing time: Mon 11 Aug 2025 01:01:05 +0000
Manifest this update: Mon 11 Aug 2025 01:01:05 +0000
Manifest next update: Tue 12 Aug 2025 01:01:05 +0000
Files and hashes: 1: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (hash: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=)
2: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: 1a8lnnrIe1BGII52lWSApbDnYoEv6GFHjZYoiVS/Ex4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:34:48:db:d8:8e:0e:0f:5d:1a:95:4a:fb:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: Aug 11 01:01:05 2025 GMT
Not After : Aug 12 01:01:05 2025 GMT
Subject: CN=c45db186aca66ea8a57a6ee7fd8f326cf7703847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:6f:96:74:c6:6d:d1:a9:d2:57:cb:67:e6:
fb:98:b1:80:1a:1c:5a:00:86:2e:12:0e:0a:b3:73:
a8:ce:42:2f:3d:25:93:8c:78:13:5e:be:2e:cf:30:
aa:38:d6:e4:5d:50:ed:c9:4c:19:71:65:a4:31:09:
77:21:3c:ba:d7:2b:8c:a8:52:53:ee:e4:ae:98:78:
29:5c:94:24:de:b0:75:60:e9:f0:df:16:fd:e9:da:
f7:98:7a:6d:85:d8:26:bf:41:8f:3d:d6:b8:d1:fb:
c0:1a:61:99:99:7b:38:f0:51:42:b2:b4:bd:59:5f:
b9:bb:39:12:54:c5:6a:42:30:5b:01:da:fc:da:43:
06:3c:1e:d6:da:f9:05:bf:87:63:2d:6b:5e:5d:ac:
94:18:a0:aa:2c:aa:84:ea:d0:a2:e2:8f:af:ed:b4:
fb:29:cd:a2:ed:63:b1:24:57:0b:52:a8:92:4b:77:
82:ef:5a:32:71:34:f9:d2:12:07:02:31:86:41:31:
f7:c0:b6:a4:e7:47:ed:75:98:1f:28:35:73:5d:27:
cc:33:aa:9d:b4:fd:36:63:14:5c:79:fc:1a:3d:dc:
f2:d3:30:dc:b5:ed:9f:68:4f:17:c0:fb:c7:da:57:
5f:22:ab:17:f6:fe:70:21:ec:e3:aa:74:0b:7f:95:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:B1:86:AC:A6:6E:A8:A5:7A:6E:E7:FD:8F:32:6C:F7:70:38:47
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:e8:59:3d:83:63:32:9a:a4:ae:6f:16:a3:a0:90:31:85:
4d:f4:dc:63:6e:e5:46:b7:55:80:fe:84:92:4c:1a:54:f1:1f:
75:3b:bd:0b:17:11:ba:cf:bc:89:eb:2c:c7:44:8a:9e:c2:f8:
ad:20:bc:c9:cb:a1:5a:c5:60:45:97:f7:ad:11:ad:bf:1c:59:
fc:b3:74:8c:63:96:8b:39:b8:fa:64:c5:a7:5a:15:77:ff:62:
9d:34:24:d9:69:a2:48:1e:65:80:55:26:d1:58:90:f8:90:46:
2b:3a:68:32:d6:b9:e7:cf:05:48:b0:fe:df:f4:96:5a:d6:ad:
6d:81:07:d4:15:05:77:42:bd:b0:3b:68:28:af:76:32:3d:dd:
00:7c:27:38:18:6b:4e:a8:dd:ab:27:e5:23:dc:03:c7:ec:fa:
90:df:81:9d:45:58:b4:1a:20:1d:d6:04:a8:c9:2b:a1:83:03:
cb:e0:f4:09:2a:e0:f2:e2:03:57:e3:82:73:86:a5:9e:10:40:
ec:5d:d6:14:d5:fc:e1:d0:aa:c8:eb:8d:b4:4b:ad:84:50:59:
86:a3:90:f6:76:fc:d6:c1:e5:d2:ea:81:33:c2:9f:00:d3:78:
14:e9:4d:da:ba:7b:b0:28:8b:a6:58:1e:73:c9:88:d7:02:d0:
3f:ba:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:57 2025 by rpki-client