Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: NBVTSdJuCyhBbK7AKt0/P7MAww0ICCJQQInbHqsx/hY=
Subject key identifier: 11:53:7E:F5:B5:4E:39:3F:CF:9A:5E:0F:D5:4F:05:58:42:90:9F:78
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019893A3CC3372168C1DA94DF6221AFEA8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1407
Signing time: Sun 10 Aug 2025 11:00:41 +0000
Manifest this update: Sun 10 Aug 2025 11:00:41 +0000
Manifest next update: Mon 11 Aug 2025 11:00:41 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: 1vNnaj8ojCogdVdCnQMthJ7n0z+YZq4Fx0Pfi2ObwXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:cc:33:72:16:8c:1d:a9:4d:f6:22:1a:fe:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Aug 10 11:00:41 2025 GMT
Not After : Aug 11 11:00:41 2025 GMT
Subject: CN=11537ef5b54e393fcf9a5e0fd54f055842909f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:cf:c2:84:71:5f:37:19:31:b9:08:c7:29:
09:b0:a2:df:06:44:9f:f2:a5:6a:d7:a6:3e:69:31:
99:64:ca:0f:9f:de:b9:ac:55:af:cc:b8:f6:54:58:
77:f0:bb:a2:3e:0f:25:3c:09:31:0a:73:e4:28:ee:
3d:b6:c7:73:c8:06:5a:1e:1d:b1:8d:c7:2b:24:0d:
8b:ef:6d:e9:16:ac:12:7a:90:72:e6:53:9c:16:7a:
b2:1b:47:d9:45:00:d3:60:11:67:13:d4:c5:a0:0b:
9f:25:6c:8e:a2:e0:b4:09:6e:4e:0a:87:ff:6d:81:
b1:82:63:0d:1e:f4:30:70:63:f8:09:4c:24:9f:14:
bb:47:8b:5b:29:e4:db:97:cb:50:cf:13:2a:d7:fe:
bc:fd:d9:e7:bf:07:b4:bf:eb:b7:46:dc:75:3b:e8:
42:11:2b:53:66:33:86:94:89:3c:7f:29:c1:f0:d7:
60:a7:c2:e1:33:34:18:42:1f:a2:7a:df:dd:f5:dd:
62:5b:ed:91:27:f7:f5:55:7a:65:08:56:3e:96:81:
2e:52:d9:21:20:99:6c:0d:2a:9d:dd:04:76:af:23:
69:19:b0:54:89:c8:c1:33:1d:41:44:d7:3c:e2:e7:
7e:d3:7a:1c:ae:60:5c:28:33:3f:6e:dc:d8:03:5b:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:7E:F5:B5:4E:39:3F:CF:9A:5E:0F:D5:4F:05:58:42:90:9F:78
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e1:f1:86:f5:ff:90:98:30:f4:85:37:dd:17:e6:ba:be:f8:
30:a8:ed:7f:ff:c0:e5:54:23:36:7b:e3:bf:a1:5b:37:80:32:
c0:c3:67:8c:37:3a:1f:74:36:73:48:a3:fd:ea:82:48:a9:df:
65:a8:73:2e:af:87:f5:ef:1d:6f:bd:c8:6b:f4:d5:f6:36:66:
45:35:79:fb:54:a3:ce:07:e7:1e:27:50:fc:79:d1:0e:45:3f:
5d:b5:3c:37:a8:9b:a1:8a:79:61:80:84:fb:ac:65:54:78:b6:
0a:66:74:70:86:6d:7b:97:72:d2:87:17:d7:1e:54:0b:50:24:
9f:b5:c0:7f:3c:aa:1b:10:3d:ed:5d:6f:33:5f:57:4c:05:f7:
7a:bc:7a:fa:20:aa:ff:19:4f:8d:08:14:7a:58:94:7c:e5:77:
e5:2f:0f:48:ba:e8:6e:3a:50:51:af:e2:d4:ec:dd:fb:78:20:
3e:c1:79:de:87:f9:28:7e:0c:a4:7a:ec:f7:f6:54:f4:ce:bd:
f1:65:1d:56:c4:ea:35:59:2a:b7:d6:b9:b3:e9:87:73:42:45:
2a:12:6b:79:84:21:7d:c0:a5:86:f1:72:b3:8b:c4:c1:c1:77:
4d:53:46:45:79:9a:f6:67:3f:62:be:73:d0:b6:10:9f:af:79:
e1:89:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:47 2025 by rpki-client