
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: 0/adB2SAOveN9nN0heZwXRilv9tyUxAtOp4+PScUntg=
Subject key identifier: 57:AF:E7:10:8C:48:03:F2:2B:E8:C9:BF:27:D6:FA:70:EA:5B:0E:4A
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 01988EED13E56DCE522F407A82DB420FE192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 1257
Signing time: Sat 09 Aug 2025 13:02:38 +0000
Manifest this update: Sat 09 Aug 2025 13:02:38 +0000
Manifest next update: Sun 10 Aug 2025 13:02:38 +0000
Files and hashes: 1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: KTqTSRSQ5m5YTaqGKZubnWHvuGVTe4O9LCUsLXFkeIA=)
2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:13:e5:6d:ce:52:2f:40:7a:82:db:42:0f:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Aug 9 13:02:38 2025 GMT
Not After : Aug 10 13:02:38 2025 GMT
Subject: CN=57afe7108c4803f22be8c9bf27d6fa70ea5b0e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:1d:e9:dc:d9:49:79:c9:f6:48:8c:03:e9:
0e:e6:7a:71:af:87:c2:27:5a:18:31:fa:23:83:84:
2c:1c:8f:11:ae:a7:bf:bb:2c:5f:ca:41:7f:8a:04:
67:41:50:b3:53:80:0c:ca:60:c7:85:15:fc:56:e4:
14:e3:65:19:20:3b:b2:00:c3:40:62:9a:df:8d:13:
f0:9b:60:d5:c8:85:b4:3c:bc:1c:2e:c0:8c:2a:14:
96:2d:65:61:96:40:61:2b:e8:a4:9b:fe:62:d5:a4:
76:db:79:63:7b:1c:10:06:97:42:6c:c6:db:9b:33:
c8:7b:76:f3:89:d4:d3:4c:d8:92:1a:94:5b:fa:1a:
e0:1d:01:91:1b:57:8a:a3:17:15:e5:d0:39:7d:b4:
8e:0e:ee:a2:a8:b3:52:34:f8:c8:82:3e:a9:2c:62:
26:c9:66:c5:05:53:47:62:4e:de:f1:25:b8:99:33:
03:0d:14:bc:f7:b4:77:dd:9d:5d:50:0f:1a:f5:aa:
75:5d:a3:e3:78:e9:e4:db:ee:ea:f9:5f:71:ff:f6:
c3:5f:42:a9:1e:28:46:56:c8:65:5a:3b:9d:6c:24:
14:f3:fc:50:b1:8b:99:d9:17:bb:81:8f:98:49:b5:
b8:f8:a4:4a:5d:cc:34:68:5a:7d:fb:77:ec:07:7f:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:E7:10:8C:48:03:F2:2B:E8:C9:BF:27:D6:FA:70:EA:5B:0E:4A
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8b:95:c9:79:59:61:70:b7:aa:bc:3c:e2:66:a9:3a:bb:82:
f8:c2:97:5e:1a:89:f4:a9:70:5e:df:0b:0b:ad:81:b4:95:ae:
4a:47:cb:db:9c:29:7d:ab:19:9b:ed:0b:ee:8e:62:8d:9e:77:
8f:d1:1b:74:35:90:d6:29:7d:c9:54:17:c0:41:2f:b4:8d:9b:
06:bf:92:7f:b0:1c:ac:7b:4e:13:53:5b:4f:57:0b:a1:04:ec:
d0:5c:95:f8:46:33:5f:bf:4e:b5:23:48:64:cb:51:e3:1a:04:
a4:6a:76:75:0a:7a:dc:43:7a:6d:cc:35:ec:56:59:ea:05:38:
13:0b:a2:76:f6:84:0f:2b:e3:b0:a9:80:96:2e:5e:b2:88:9e:
ed:81:4e:8d:6a:7a:9b:b1:9c:7f:d1:04:72:12:3f:b2:18:12:
c8:01:89:83:cb:2c:7f:d7:34:cf:bf:05:a3:9a:36:6a:3a:d2:
af:be:7f:5e:37:b8:3c:7b:1c:2b:cd:8d:98:a4:c7:7b:0e:c5:
6a:69:34:c7:b3:73:4c:ae:12:28:4c:fe:58:07:e7:79:33:62:
3f:e8:63:e2:9f:d9:de:4f:6c:18:1d:39:61:b4:60:88:f9:e5:
0f:06:a1:21:51:0e:5d:f1:aa:24:cf:09:ba:9f:a9:d6:5a:26:
60:17:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:05 2025 by rpki-client