Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: 0y4a8EdA6gVhx+h0hp9ywyjkVi7WUkSyScpeCyk1w+A=
Subject key identifier: 1D:E5:1D:1C:FC:82:CE:DE:EB:20:8E:2C:83:3F:53:EB:63:22:50:B9
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 01988F903212485804B09EB391CF1A087898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0DA8
Signing time: Sat 09 Aug 2025 16:00:48 +0000
Manifest this update: Sat 09 Aug 2025 16:00:48 +0000
Manifest next update: Sun 10 Aug 2025 16:00:48 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: 8CgBlP9PfudmeqyuxQm0zrjTiLewJNq1u8JOBDLrJQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:32:12:48:58:04:b0:9e:b3:91:cf:1a:08:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Aug 9 16:00:48 2025 GMT
Not After : Aug 10 16:00:48 2025 GMT
Subject: CN=1de51d1cfc82cedeeb208e2c833f53eb632250b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:00:17:bc:9f:0b:91:66:0f:c2:3f:d6:5e:
79:f9:c1:a1:5e:1d:06:a8:93:19:1f:61:89:c5:5c:
b8:22:da:53:e6:98:01:82:d0:03:f4:ba:f9:50:ed:
65:ee:5a:b6:6b:25:7a:e2:4e:1f:e8:fe:31:e7:b9:
c8:74:fb:46:f6:a5:0f:0f:a2:05:ea:b3:48:17:fa:
76:07:70:c9:b0:3f:b3:15:45:ff:da:58:f8:c1:c7:
57:89:7b:0f:8f:42:8b:01:e5:7c:cd:c1:bc:75:3b:
3f:c6:4f:76:98:ee:39:61:fe:1b:fe:0f:42:7a:9a:
90:fa:96:29:d3:a0:a1:79:33:e7:b0:58:d0:40:92:
4b:29:d5:a3:43:7e:f2:96:63:7d:c7:37:7e:10:0d:
df:26:5e:5f:ff:b9:30:22:d1:8f:8a:38:f8:ee:fa:
ec:10:88:1c:00:1b:5a:f6:f0:9e:ac:ac:2d:f1:58:
df:66:7f:b6:dd:ab:e6:c2:fe:42:1c:30:86:58:59:
39:76:a5:e6:12:2f:5b:67:f0:49:88:2a:40:d8:40:
4c:1b:56:69:8c:05:ec:51:b2:37:35:a6:cf:f3:2a:
d8:67:42:6d:e4:8f:76:10:9d:46:ee:b1:64:a8:fd:
2a:78:17:78:48:13:a3:1f:da:d7:b8:ab:30:1c:0d:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E5:1D:1C:FC:82:CE:DE:EB:20:8E:2C:83:3F:53:EB:63:22:50:B9
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2d:04:c5:cf:9b:be:8d:46:10:7a:5c:0a:36:ea:7e:26:c5:
e2:db:23:1c:40:50:7f:4f:7e:60:28:7c:8a:ad:48:32:77:36:
db:dd:05:09:54:34:04:c9:3c:92:5f:c0:9e:e5:0e:27:ed:8f:
b7:70:c3:bb:b1:87:f4:6c:b4:26:54:7f:3f:de:b8:ea:03:af:
be:4d:10:11:a6:57:a3:5c:55:27:eb:e6:1f:e5:3c:41:aa:c3:
18:8e:48:2e:70:51:ed:5e:87:f5:64:b2:01:09:ee:80:1e:bf:
36:ca:cd:4a:c3:1b:53:f9:1f:eb:65:02:d2:ed:00:c5:15:f2:
aa:9e:6a:9b:63:2a:55:d9:b7:97:e7:54:ed:27:67:05:92:e5:
a4:90:1f:73:0a:0a:91:2d:ee:51:42:e6:0f:35:8b:21:2e:24:
48:09:af:99:24:e4:61:a1:26:76:c9:8f:f6:62:3e:73:e8:c8:
5b:94:47:10:62:b3:49:a4:50:ca:a9:84:8a:c3:c5:fd:9a:33:
77:ae:bb:8f:a4:4c:de:ef:73:bd:83:42:46:bd:3c:23:8d:1a:
dc:7f:9f:47:ec:aa:2f:b5:7b:65:3f:c5:4f:53:20:47:3e:1a:
cf:0a:8f:9a:58:90:29:38:32:70:22:20:5c:03:e4:43:1e:07:
8e:ae:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:14 2025 by rpki-client