Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: Lp2CzFZ47erPEzD8ce9eHbiW4DiGrQYTji0fRf08hww=
Subject key identifier: 28:EA:C9:7A:28:07:9C:C3:75:CB:0F:02:4B:DE:62:75:26:C7:24:65
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 0198936D7648F699A72B6B6AC3C5340A2788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 01AA
Signing time: Sun 10 Aug 2025 10:01:21 +0000
Manifest this update: Sun 10 Aug 2025 10:01:21 +0000
Manifest next update: Mon 11 Aug 2025 10:01:21 +0000
Files and hashes: 1: 6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa (hash: I2XmgPmlr8AeGcV748BNU3DKlg3Epa3bbBrXS+lzrBo=)
2: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: bjJfngQWGgiKYNmaNh3/A/Kfuh9iSuwN239z8mHz3eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:76:48:f6:99:a7:2b:6b:6a:c3:c5:34:0a:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Aug 10 10:01:21 2025 GMT
Not After : Aug 11 10:01:21 2025 GMT
Subject: CN=28eac97a28079cc375cb0f024bde627526c72465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:ab:c1:9e:74:9f:5c:98:0e:39:02:f0:80:
1d:eb:27:a1:d7:4d:46:45:6d:53:76:aa:59:f3:7c:
ec:1e:51:fe:6f:07:90:cd:d5:ec:aa:21:90:6a:f1:
c1:28:db:ee:ba:cb:cf:99:4e:5c:d4:08:df:bc:8a:
03:ef:1f:81:ca:7c:74:a5:b1:9f:21:0e:f6:91:30:
ba:ac:2e:30:ef:c9:fc:9d:6f:1c:59:07:45:6f:27:
d3:90:39:1c:8f:8a:1b:27:d2:3a:12:e5:6a:1e:cd:
7c:18:17:71:df:35:07:27:ee:10:5e:42:9e:8d:4c:
ba:97:34:44:f9:f9:c6:2f:0c:56:36:00:d8:b7:89:
fe:00:78:76:3e:0b:84:9c:8f:bc:0a:70:76:83:35:
a0:8d:2d:47:09:8e:b6:76:86:a6:16:c7:d8:46:06:
9d:3c:81:6c:fc:6c:df:c2:28:2f:30:22:38:c5:33:
e0:c2:13:3f:7f:2a:11:fb:4f:eb:4f:35:5a:af:ab:
19:39:98:a5:74:8a:4b:f2:98:e8:44:00:81:80:2a:
7d:15:4c:d9:d0:6a:9b:bb:9c:f1:c4:b6:5e:be:cd:
7c:78:ca:64:3c:d8:15:cc:11:b7:01:b8:f2:67:44:
ae:bd:4a:09:a5:db:39:b1:61:21:b7:0c:65:26:3a:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:C9:7A:28:07:9C:C3:75:CB:0F:02:4B:DE:62:75:26:C7:24:65
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:46:aa:6d:0a:42:8c:1b:73:72:26:e9:65:38:18:09:2e:
3e:6e:2b:57:e7:33:dc:9e:3f:93:0f:e6:ce:a9:28:6f:eb:97:
86:4a:60:a6:88:38:15:80:b8:c2:c1:c6:43:4a:33:9b:74:0c:
e6:33:4d:af:f3:aa:bc:5f:48:ca:97:6b:80:77:76:7e:3f:47:
5e:38:66:e4:3f:eb:c8:3b:bf:24:78:7f:18:10:30:f2:fc:d2:
91:07:8b:d1:0e:06:0b:a8:0f:07:8c:21:35:7e:71:98:a0:07:
13:52:4b:16:36:9f:56:0b:af:35:21:50:2c:19:37:78:aa:0c:
49:be:79:84:5d:85:e8:d1:4e:73:62:d6:6d:e7:d2:da:76:71:
a2:49:d9:ba:84:20:45:58:9b:44:76:83:dc:64:5b:27:7b:1f:
53:f3:5c:88:50:29:22:c8:45:01:63:57:83:c9:5d:cd:9c:63:
29:09:39:8c:e5:7a:24:f0:5a:f0:ec:ff:79:6b:40:83:c8:eb:
59:b7:df:6f:6f:ad:cf:78:71:82:6f:6a:f1:42:4d:45:34:a5:
ee:94:30:d2:2a:00:97:f3:7f:74:20:3d:b8:4d:f6:9a:d1:1f:
89:99:0b:12:a5:0a:ff:c0:cd:e6:40:7c:ab:4f:96:71:9c:55:
42:76:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:49 2025 by rpki-client