Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: 9kEC7g7aShTcMELuPB3/sCLbcJhiduXI4ltdJzPmEEI=
Subject key identifier: 95:81:E3:FC:ED:1D:0C:B9:A1:16:72:3C:97:5B:BF:C6:3F:2F:4B:36
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 0198819DB549457834E10062DA17B660DEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 0193
Signing time: Wed 06 Aug 2025 23:00:53 +0000
Manifest this update: Wed 06 Aug 2025 23:00:53 +0000
Manifest next update: Thu 07 Aug 2025 23:00:53 +0000
Files and hashes: 1: 1-MrWjx41MLE2Craolgg-haNHa9U.roa (hash: tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: DQgv1DtvVtLIaU/dtHfjWogU67hfdyJmvnyDqApoNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:b5:49:45:78:34:e1:00:62:da:17:b6:60:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Aug 6 23:00:53 2025 GMT
Not After : Aug 7 23:00:53 2025 GMT
Subject: CN=9581e3fced1d0cb9a116723c975bbfc63f2f4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:a1:c7:3a:35:da:ba:a9:7a:18:d1:3d:9a:
d8:87:cb:e0:1b:7a:55:36:6c:c9:71:78:ff:5a:e4:
08:23:34:42:0e:5c:96:74:4e:1a:8b:d5:9c:f4:fc:
fc:5e:45:88:1f:aa:97:5e:58:cc:34:2e:d5:1a:6a:
44:db:21:86:c9:3a:f5:ce:b6:89:7b:b7:d0:ac:d7:
59:eb:2b:0f:40:c2:88:c6:7b:da:09:f0:ef:af:0b:
7a:1c:98:c1:9d:5c:9e:7d:4f:af:f3:0f:96:0c:3e:
dc:47:69:16:97:7f:be:17:12:ab:cd:ff:47:42:77:
f5:ed:33:d2:42:ae:03:b5:32:43:f4:73:42:90:3b:
19:e7:37:50:ad:12:d8:5b:69:ea:bc:eb:91:9d:41:
72:d2:25:f7:bd:06:24:16:b1:0b:a7:d0:e1:80:3c:
85:01:37:80:89:94:e5:d1:f1:48:cc:61:8f:25:7e:
21:17:d5:93:2d:fb:86:7f:3b:04:e9:4f:68:9b:88:
bf:f7:3d:b6:2f:69:dc:57:16:40:01:c6:4d:a4:a2:
81:63:23:1a:de:e6:da:38:5e:48:fa:c5:3d:4c:0b:
e5:30:7b:ac:78:0b:92:ae:9a:9e:eb:88:1f:e4:a0:
8d:e1:27:e1:ea:1b:b4:3f:34:fb:ab:a1:5a:22:67:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:E3:FC:ED:1D:0C:B9:A1:16:72:3C:97:5B:BF:C6:3F:2F:4B:36
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:ea:33:68:61:db:73:e7:64:d8:24:ad:70:ca:47:70:e3:
82:79:79:59:1b:d6:43:cb:14:af:63:b0:20:a5:ea:f5:5f:dc:
72:59:95:d3:54:6b:f9:eb:f5:5a:ee:12:e0:7b:55:77:c4:bf:
14:90:b5:38:cd:dd:a5:bb:85:c4:e1:7d:25:d4:00:dd:64:87:
2c:ce:8d:bc:c1:88:5f:ce:b2:fc:5a:3d:47:58:02:ea:52:89:
84:01:47:26:b9:2e:1e:9a:c5:c5:64:7d:91:b5:99:c5:36:e3:
b6:80:42:f2:8b:7a:08:b3:2f:0f:31:39:22:21:86:3a:54:2b:
d1:b3:f1:bd:4f:01:be:9a:40:38:32:fa:48:a1:98:eb:ef:7c:
f5:68:1e:64:c9:35:90:fa:65:75:49:06:41:60:02:b8:67:e8:
48:7c:63:a7:03:86:a4:db:b4:2e:d9:8f:41:71:dc:35:4d:dd:
3e:17:cf:9f:4d:c9:6e:50:3e:3e:2c:5e:77:e0:51:99:2c:dc:
81:1d:6a:6b:0a:b9:54:04:6a:32:d4:5a:76:01:88:a1:63:c4:
34:e3:24:ae:d1:9c:fb:13:a4:e2:7e:e6:0c:fb:9a:c5:5e:25:
62:13:b9:3c:52:c1:a4:3b:14:cb:62:67:65:ff:c2:e0:47:ea:
9e:0e:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:15 2025 by rpki-client