Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: fQYIzxi1uRTQBtsw528Uepl6g6zvWUXEfQsbas4pIEk=
Subject key identifier: 5E:DC:0A:40:EB:35:F8:35:3E:C1:BB:ED:00:28:27:82:E2:CA:D5:27
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019893364B448F6B33E4F38EF2A257D035C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1469
Signing time: Sun 10 Aug 2025 09:01:05 +0000
Manifest this update: Sun 10 Aug 2025 09:01:05 +0000
Manifest next update: Mon 11 Aug 2025 09:01:05 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: stdQTAexLkG2Ruo6FjSOHGDBaoYtMp6f61YbsuENsPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:4b:44:8f:6b:33:e4:f3:8e:f2:a2:57:d0:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Aug 10 09:01:05 2025 GMT
Not After : Aug 11 09:01:05 2025 GMT
Subject: CN=5edc0a40eb35f8353ec1bbed00282782e2cad527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:e4:f7:58:be:c7:c6:5a:1f:8f:05:0d:07:
a4:be:9e:6d:cd:3c:9e:26:1b:66:e5:a9:44:6c:bf:
21:83:4c:b4:60:49:93:a1:9f:07:6d:1e:44:80:6d:
be:b4:7c:7b:3e:31:4b:ba:d6:49:f3:72:37:4c:6c:
fd:45:41:28:45:ab:e0:fd:a7:90:af:4e:e9:86:9a:
c4:34:02:fd:ba:d7:70:f5:6e:7d:3c:04:3e:7c:bd:
6b:fc:98:14:1a:9d:12:91:e7:d0:ef:68:8d:5a:c1:
73:74:a5:47:6c:31:79:e6:3b:e9:57:79:15:2b:14:
aa:14:e1:38:d6:e4:d5:11:57:dc:16:6a:42:fe:e0:
74:05:43:e9:3b:b7:d3:96:7e:5e:9b:31:f0:ad:d6:
67:52:dd:35:c2:ff:39:4b:f7:aa:c8:63:95:e5:cd:
2a:97:a6:70:3b:de:12:c5:c8:d3:02:be:6a:76:fe:
d7:bf:16:05:9b:85:e5:e1:82:b9:63:ad:83:99:ab:
ce:75:21:55:38:93:5c:33:8b:d0:15:d3:9f:53:19:
17:d9:a2:9e:53:5b:4b:da:83:a0:3f:d5:f9:8d:5c:
75:37:65:55:19:f7:14:9b:b3:dc:fc:8b:b2:8a:c5:
17:33:41:73:d7:33:34:98:a5:2c:b5:1b:2b:6d:e5:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:0A:40:EB:35:F8:35:3E:C1:BB:ED:00:28:27:82:E2:CA:D5:27
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:58:b1:23:0d:cf:97:a1:c4:dc:29:21:2e:e7:3a:53:45:
66:57:1c:dd:bb:07:2d:9f:20:8e:70:80:b3:78:b3:76:77:ba:
97:63:ca:c1:d2:e7:fa:b7:7c:00:74:c6:31:67:f2:d7:05:1b:
fc:d1:38:1d:f5:b4:3b:4a:20:10:c9:a4:4f:04:c9:4a:21:c7:
a4:96:92:fa:a9:f8:a9:41:ff:01:c5:ae:33:65:19:60:c7:e9:
18:f4:f1:01:72:b7:1b:ec:32:3c:bf:a6:2d:d2:6e:5c:c4:9b:
de:c4:a7:43:33:48:23:77:ad:d7:98:a2:29:ae:c7:85:08:49:
7d:bd:28:20:f5:8b:f6:45:53:69:21:24:df:72:5d:27:78:02:
52:be:9e:5d:89:99:92:44:ec:6e:d1:d4:1e:9f:89:1c:96:ac:
5e:30:1b:85:ff:63:3e:28:f2:c5:d9:bf:70:c0:19:22:6a:b6:
3a:fb:0d:fd:bc:c1:83:cb:d8:89:ae:6d:cc:76:ad:af:6b:9f:
25:d2:96:98:e8:f1:94:f5:6b:5e:f1:43:ba:5b:d9:62:d5:8c:
0c:ed:39:fa:6d:ef:36:f6:d0:30:97:c6:49:4b:4d:d7:24:95:
42:63:6f:0e:6a:ee:47:1d:e4:a0:b4:49:48:07:74:6a:be:d8:
ec:95:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:18 2025 by rpki-client