Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: RZkzcBgniAVaK2HnB0h6HBFG21V/VLwLO4qrJjFY5sM=
Subject key identifier: EE:BB:41:57:7B:3C:1B:3F:7E:94:6A:68:97:DD:4C:1E:C3:E0:6D:1C
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 01989335E756EE4F7A1A86BD4FD427AD2283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0ED6
Signing time: Sun 10 Aug 2025 09:00:39 +0000
Manifest this update: Sun 10 Aug 2025 09:00:39 +0000
Manifest next update: Mon 11 Aug 2025 09:00:39 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: 9lqPyTGEhuylPFx2Ht2hTKV6zLFeATsDkS6xs7Ndeag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:e7:56:ee:4f:7a:1a:86:bd:4f:d4:27:ad:22:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Aug 10 09:00:39 2025 GMT
Not After : Aug 11 09:00:39 2025 GMT
Subject: CN=eebb41577b3c1b3f7e946a6897dd4c1ec3e06d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:45:e4:7b:44:ec:fc:71:75:07:f8:b1:83:
7c:06:28:88:59:31:23:04:84:75:6f:92:39:a6:97:
d8:39:3d:5d:9a:b2:07:69:23:fe:f8:1d:1b:7f:42:
9d:b0:1e:fd:86:0a:94:63:fe:f8:ad:aa:3b:d7:93:
99:ec:56:db:5c:0c:81:60:7b:1f:51:32:81:92:3f:
c0:9e:21:cc:55:47:82:03:16:b4:a8:7d:a8:27:1c:
f2:59:43:63:3b:00:07:5f:6d:29:fd:73:d8:f4:2b:
93:12:5b:01:2e:05:85:e1:26:80:64:90:1c:7c:91:
8d:27:47:a0:90:b4:11:77:f3:90:d6:ff:94:83:ac:
88:c9:7c:26:aa:53:dc:7b:c1:40:67:dd:73:61:a0:
d4:37:60:ff:90:95:d8:3a:cb:c8:23:aa:01:e4:1e:
36:4e:31:2a:bd:f4:bd:21:4c:5e:8d:a4:f3:a6:da:
2f:ec:5e:a2:75:fc:9f:56:55:93:39:d6:22:18:42:
be:43:4e:76:90:41:14:6a:73:19:d6:25:35:06:7f:
f9:37:eb:b6:85:ee:b7:f5:06:d0:21:11:1a:ec:d4:
e7:7e:4a:5c:7d:b3:68:21:20:54:a4:3e:a6:a5:db:
fd:bb:d1:1a:e1:9c:8b:ea:68:e9:53:d8:d6:de:21:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:41:57:7B:3C:1B:3F:7E:94:6A:68:97:DD:4C:1E:C3:E0:6D:1C
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:40:5d:9f:4e:db:49:6b:4a:ae:37:4b:5a:3c:9d:77:29:
e6:f9:8e:8b:07:a0:c4:b7:7a:ba:67:d3:47:d9:ae:65:f3:67:
8c:c5:54:b9:0e:0f:24:84:76:7e:62:e9:12:62:2c:ce:f2:12:
25:c4:20:65:be:ee:15:79:f8:85:76:64:b5:b9:80:c5:7f:99:
d0:bd:de:f6:45:2d:3a:d8:92:40:24:f2:3c:bd:9e:03:f3:9f:
0e:dd:42:f1:3c:6a:da:16:13:9b:06:b2:e0:6e:cf:c3:31:b0:
22:60:50:86:e3:6e:82:63:79:37:3c:28:b4:1a:ea:5b:81:c9:
e2:ac:95:91:ae:1b:20:8c:12:4f:1d:f8:8f:db:8f:26:b3:a9:
93:e8:53:33:1d:94:6f:81:1a:7a:7c:72:45:7e:97:1e:fe:b3:
77:cf:91:ae:80:8e:23:30:0b:ee:51:03:87:3a:a6:e7:30:fe:
67:f8:a4:3d:0b:4e:3f:19:b5:73:cc:34:96:78:25:13:c7:7c:
26:f0:83:0f:2a:7b:81:db:d8:20:07:a2:62:bf:c6:2b:d4:05:
d8:2b:ff:fd:0d:21:bb:21:77:c8:e4:73:06:b1:95:01:95:4c:
a6:e9:d3:03:8a:26:aa:3c:61:a6:d5:8d:1e:92:08:13:f5:be:
d6:4c:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:11 2025 by rpki-client