Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: SCbpi+52ONnuk0j9vvZQVVTQwqsPbirNk015jK7JW2k=
Subject key identifier: 24:14:94:D8:87:23:F5:FF:84:55:55:C1:27:BF:37:DB:1A:9D:53:B0
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019874BE461EBD7049AEC4E40DBC6B8AD294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1221
Signing time: Mon 04 Aug 2025 11:01:23 +0000
Manifest this update: Mon 04 Aug 2025 11:01:23 +0000
Manifest next update: Tue 05 Aug 2025 11:01:23 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: 0qdxxCeBTQU5iN5FVfqqmE/oYppdrrRuf//zDcog7YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:46:1e:bd:70:49:ae:c4:e4:0d:bc:6b:8a:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Aug 4 11:01:23 2025 GMT
Not After : Aug 5 11:01:23 2025 GMT
Subject: CN=241494d88723f5ff845555c127bf37db1a9d53b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:ed:83:ed:93:a2:f0:3d:41:88:5e:a9:13:
de:b7:e5:e6:0c:6b:7b:8b:5b:91:2f:f9:b0:b1:c7:
83:e3:d3:03:36:42:3b:e8:0e:b7:18:d0:e9:29:92:
51:c6:7c:0d:48:01:5d:c7:a8:00:13:9d:60:80:15:
ab:86:66:7a:fe:65:c0:e1:93:86:3e:89:f4:d0:67:
a7:db:36:94:64:ae:c4:b0:3c:f8:33:1e:2c:cd:7f:
f7:68:b6:cf:3f:9f:08:49:8c:12:86:47:6d:81:dc:
ab:b3:83:ca:80:d4:20:b3:ca:1b:3e:aa:94:35:f9:
d4:63:8e:9f:52:5d:c7:9f:a3:b9:ea:81:7c:c8:47:
3c:38:ea:e6:63:7e:40:55:f3:7e:57:ff:f1:65:ab:
2b:f5:d1:78:2d:dd:e3:a4:5d:72:b3:a7:50:97:25:
9b:d5:97:fd:30:fe:df:68:ed:a8:ed:89:1b:b2:d8:
70:cd:6d:b2:ac:ac:99:73:37:07:69:05:0a:dc:82:
04:94:81:29:29:a8:b4:f2:82:de:6b:a7:3d:c6:36:
0d:05:bb:22:02:70:dc:73:c7:cc:13:2a:19:0c:1b:
6d:7c:2d:51:d2:b3:9a:7a:8d:20:d0:41:cf:f6:3e:
f8:66:67:99:1e:51:51:83:a0:9f:2c:ad:08:a5:36:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:94:D8:87:23:F5:FF:84:55:55:C1:27:BF:37:DB:1A:9D:53:B0
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b4:21:89:1a:73:92:73:7f:c1:e7:08:47:fd:cd:1d:ad:5c:
a4:4f:d7:3c:70:0e:e2:68:be:3d:8b:80:f9:0f:dc:f3:5e:0d:
d7:e0:ba:ae:d4:3d:fd:a7:10:0a:32:f0:b8:f1:ea:48:2e:84:
20:84:ff:3c:f4:0b:d1:ca:1f:f5:69:6c:84:77:84:1d:6b:4c:
6b:43:c9:84:f7:bf:62:5b:0d:c7:89:a3:30:07:e0:4c:bd:b1:
65:de:96:fa:34:38:36:b9:ea:f4:0f:25:25:61:3d:b5:15:9e:
9c:a0:37:ff:9f:01:c8:6d:5a:ce:29:4c:fc:0e:bf:5b:4a:f8:
49:d5:cb:0d:26:f8:00:6c:24:10:91:3e:bc:11:f6:6e:67:5f:
b6:80:3f:cb:48:a6:94:e5:65:fe:f2:f3:57:92:16:cb:ac:75:
54:f3:91:e7:22:8f:9d:35:b1:2a:d4:e0:aa:df:52:4f:c4:e3:
1c:df:a2:55:25:3d:f4:19:1f:7a:97:67:64:47:ed:3e:20:69:
d3:fd:31:2f:89:2e:a1:35:44:8e:f8:fb:b8:44:0f:54:9b:c0:
4b:3e:6f:d1:ac:23:ea:0d:9a:d3:0c:d8:d6:3f:a3:bc:c1:dd:
25:e6:89:79:e0:cb:47:27:a5:d1:41:4d:23:b2:12:11:0b:42:
e2:67:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:39 2025 by rpki-client