Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: 1zbbC2T8xtz5al8qhLx3OxL8RIPOvTkihpexVoDuTlY=
Subject key identifier: 84:9B:F0:C8:9A:FB:DA:43:1E:D4:63:1F:2C:89:F6:D7:99:D6:88:19
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 0198A08450C98D415D0E44ED36223B0854A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 23:01:22 +0000
Manifest this update: Tue 12 Aug 2025 23:01:22 +0000
Manifest next update: Wed 13 Aug 2025 23:01:22 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: KYw76nFWy74povu2oDViwwStk8mHnyHkyaxq4sDoR6U=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:50:c9:8d:41:5d:0e:44:ed:36:22:3b:08:54:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Aug 12 23:01:22 2025 GMT
Not After : Aug 13 23:01:22 2025 GMT
Subject: CN=849bf0c89afbda431ed4631f2c89f6d799d68819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:43:18:a6:03:ae:bb:97:22:97:82:f6:9c:
6c:c9:0f:9d:e2:96:8d:8c:ed:d0:e7:0e:14:36:11:
9f:67:17:ed:eb:9f:4f:f3:72:43:f6:74:85:5d:55:
78:8a:55:aa:16:17:d6:68:5a:b2:15:c2:0e:03:5c:
d5:d2:ee:1c:c0:f0:23:a4:9a:f4:86:e1:70:ab:a8:
ad:e5:76:27:41:6f:4c:da:ce:f9:c8:80:1f:25:94:
fa:d1:dd:42:a1:40:df:41:6e:f7:ef:ef:d1:db:1e:
f6:0d:80:07:9f:e6:d5:64:c7:80:91:a7:0e:63:01:
77:12:ea:c9:3e:e9:ad:d5:6a:cb:2f:0a:e1:3b:7e:
29:ff:02:b8:0e:49:65:62:80:eb:31:df:f4:52:a3:
c0:de:de:37:5b:e7:7b:bd:19:b1:35:0d:06:f2:de:
3f:c5:17:bf:09:fb:77:ff:73:68:fb:75:de:ca:e3:
9b:63:e6:3c:73:2b:89:37:76:a6:3d:29:16:66:7f:
15:c1:2f:ac:14:42:fe:64:ef:e2:1e:77:0a:8c:e3:
a0:cd:52:61:46:e9:e9:63:65:24:80:22:6b:71:fc:
cb:39:a6:94:36:2d:c3:53:d9:56:84:ea:6b:79:60:
8b:6d:c8:8c:5c:bc:d7:2d:b1:a0:dd:d1:29:69:11:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:F0:C8:9A:FB:DA:43:1E:D4:63:1F:2C:89:F6:D7:99:D6:88:19
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:54:5f:cc:07:f3:43:f3:cf:ab:59:d8:86:94:f2:65:19:
08:fd:10:80:e0:04:cc:0b:d3:e0:20:7a:74:6b:91:04:d1:16:
4a:6b:ee:30:46:da:c6:f9:da:26:b5:3d:01:7b:8b:0f:cf:52:
4f:cf:27:a5:a3:ea:58:bc:e1:77:29:e5:70:e1:c5:7e:6a:22:
50:e6:95:ce:1a:31:2b:0a:83:3a:f1:0c:9b:27:6a:58:37:88:
9d:62:4e:e4:9e:14:f4:ab:5c:1a:d8:08:3c:b0:4f:f5:78:55:
b8:f2:44:40:df:83:16:28:15:88:fe:de:c6:88:7a:0a:0f:df:
b7:8a:04:f6:06:13:bb:97:b4:0d:75:b5:65:a8:00:bc:e4:ec:
fb:69:19:b1:ab:d7:c8:c0:a1:f8:6f:40:25:ef:26:85:4c:a4:
19:0b:60:a0:3d:a0:58:a3:b5:62:d1:cb:6c:28:8e:a1:ec:17:
0c:1e:c5:a4:da:b2:4c:ca:9d:c1:55:e4:7d:6a:4e:81:ec:1c:
05:71:84:87:21:71:c1:4b:54:3d:64:19:54:44:be:ca:82:d0:
fd:fd:6b:a8:6b:14:60:dc:81:21:f5:31:d9:8d:9a:3a:59:bb:
c1:40:31:11:8b:ac:78:94:59:7a:89:42:c8:ab:f4:6e:f2:36:
48:ee:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:33 2025 by rpki-client