Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: 1BKOSOx02YR1FlcJ/Or3ostMM9bXWRVLl9QZkkLC7nw=
Subject key identifier: 58:4E:96:49:CB:38:84:4A:F5:7F:95:75:4F:4A:77:F3:2C:C7:84:25
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 01989E95A941C1632DB5FE273464EAB51EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1634
Signing time: Tue 12 Aug 2025 14:01:04 +0000
Manifest this update: Tue 12 Aug 2025 14:01:04 +0000
Manifest next update: Wed 13 Aug 2025 14:01:04 +0000
Files and hashes: 1: O6yhVl-p8zPN_CcTQWHTkGKQoq0.roa (hash: HphO2Xf8amyd/7vc+hBrhD7m5RPblIsLscX8rs+h9y4=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: cRy/yb34u+OUVG4Wc2jEy1ioPmx87tasXhr2OaIyo58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:a9:41:c1:63:2d:b5:fe:27:34:64:ea:b5:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Aug 12 14:01:04 2025 GMT
Not After : Aug 13 14:01:04 2025 GMT
Subject: CN=584e9649cb38844af57f95754f4a77f32cc78425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:47:d1:2d:a1:1a:94:0f:44:c5:0a:d8:bb:
84:8e:ac:2e:dc:57:43:95:b7:eb:6a:c9:41:53:dc:
b8:dc:a5:6a:f4:09:25:cc:ad:4c:4b:4c:01:2d:6e:
f8:e6:18:99:39:3c:70:c4:f7:7f:16:c1:59:46:9a:
05:98:75:12:cd:85:49:63:ec:a2:52:d9:f5:3e:81:
c3:b2:d6:54:a2:f4:ad:53:5b:88:7b:0c:63:ec:0c:
be:d2:d0:01:71:04:e9:c3:4c:96:69:7e:3e:f9:6d:
fc:bf:63:26:68:76:44:e3:fe:3f:70:3b:b0:7b:b4:
3a:53:56:01:dc:ea:77:e7:7e:61:0b:41:04:54:8c:
8e:3a:19:cb:52:86:85:4b:ca:90:ce:6b:22:73:5f:
e6:68:b2:00:07:80:41:ed:8f:1c:68:89:26:a8:b0:
bb:c8:e4:0b:5e:5d:75:77:8f:0f:46:73:8d:24:d2:
d7:26:45:d0:26:e3:c7:5f:d0:3e:7e:49:19:80:37:
b1:8d:62:5d:ec:31:06:49:d3:a9:81:7a:74:e6:3d:
74:30:a0:58:36:32:66:bd:10:17:2b:31:35:6f:9e:
0e:6e:23:c1:ec:57:03:36:ab:ce:20:6a:b3:cc:3f:
e4:aa:e0:30:8b:d4:97:7e:4f:55:ca:6c:2a:c5:40:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:96:49:CB:38:84:4A:F5:7F:95:75:4F:4A:77:F3:2C:C7:84:25
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:49:a8:40:c9:8c:54:1b:bc:02:f8:f2:9a:a5:8b:c3:7d:
c7:f7:bc:db:d9:76:2d:9a:c7:52:14:ce:01:88:ff:68:28:34:
05:f4:45:26:da:9c:f7:a7:37:9c:8b:97:3e:1f:86:b5:d2:71:
95:03:48:c1:b3:59:ee:c5:69:0d:ed:ac:93:db:8c:92:92:7f:
09:96:1e:ee:b0:25:b9:a2:ad:37:8d:d1:54:e4:be:df:e5:fa:
94:3e:f2:0c:5a:b1:67:d1:ac:23:81:9d:a3:9e:ac:53:a1:1e:
87:6b:c2:3b:56:89:24:ce:0f:14:86:40:6e:3b:2f:c9:f6:f9:
bd:1a:e3:84:b4:33:d2:a6:ad:28:fe:1c:3a:e4:87:9f:fe:1a:
ca:17:cc:6d:0f:da:65:c7:06:42:19:c6:33:9a:cb:22:24:a2:
67:bf:11:63:7b:93:6d:65:1c:d8:9c:09:b6:3b:c9:f0:bc:79:
7a:cd:e0:aa:f2:7b:0f:09:7c:d9:59:c1:c7:f8:7a:11:e6:cf:
c2:81:72:b7:a6:71:c6:cd:5f:68:c2:ae:b1:4b:ff:d2:6b:97:
67:52:87:f6:9f:1b:51:80:fd:8c:af:eb:ab:71:e9:76:82:8e:
fa:25:eb:cb:5a:e9:80:56:ad:39:51:a2:7b:dc:f8:8f:2f:94:
95:ec:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:38:29 2025 by rpki-client