Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: mqy+Pkrr4W/UyirmHCbIqm9RdqyUbdX3p1Llo4h7SFE=
Subject key identifier: 30:46:19:A4:69:33:C3:F5:E5:04:AB:FE:CF:BD:4A:3B:F1:19:B1:D2
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 0198960020981CEA92E6CC5FEC6901165704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 22:00:47 +0000
Manifest this update: Sun 10 Aug 2025 22:00:47 +0000
Manifest next update: Mon 11 Aug 2025 22:00:47 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: 6rLOnx2OJxzbE9EjSLOT848jgGgxqd/zFhpiaGrqlSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:20:98:1c:ea:92:e6:cc:5f:ec:69:01:16:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Aug 10 22:00:47 2025 GMT
Not After : Aug 11 22:00:47 2025 GMT
Subject: CN=304619a46933c3f5e504abfecfbd4a3bf119b1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:27:ae:29:fc:8c:40:a3:f1:63:7f:64:a6:
0c:4c:b6:d5:ab:38:4b:07:15:8b:7d:89:8f:89:17:
42:be:77:a4:df:20:a3:44:7b:15:dc:9a:af:02:a5:
a3:1d:97:d1:ec:ff:b8:eb:eb:9d:ec:ed:15:f3:62:
9d:a4:2e:9d:f6:dc:08:ea:dc:65:2d:77:0e:4d:3f:
2c:c3:c7:98:49:9d:ec:34:54:89:31:29:9b:79:29:
d6:58:67:91:51:57:e2:e2:cc:a6:ba:49:a4:37:b0:
58:a8:c6:f1:ee:c1:6f:34:28:bf:80:20:37:56:3b:
6c:ad:4e:a4:83:c6:cf:6d:be:03:53:3a:e4:a4:03:
c7:8c:5a:0c:49:f4:38:70:93:d0:11:7c:5a:ad:a7:
0c:f0:4c:81:e6:9c:e1:f9:6d:3e:fd:4e:97:28:57:
eb:85:0e:7a:eb:20:e9:bb:86:3e:75:50:d2:d0:6a:
24:e2:ed:9f:1c:d8:8c:22:2c:99:18:69:78:c9:bf:
e2:42:21:f2:db:73:2e:f8:f7:9f:6c:ee:b3:b9:c9:
85:8a:ab:ab:cd:b7:2d:ea:ac:4f:b8:d0:f4:6a:9c:
37:98:e4:c3:af:71:f5:a2:a4:2c:6f:3a:d6:1f:31:
0d:55:c1:da:91:ea:90:84:22:b9:46:81:92:9e:7c:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:19:A4:69:33:C3:F5:E5:04:AB:FE:CF:BD:4A:3B:F1:19:B1:D2
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2e:58:07:d0:2f:e9:10:35:16:e5:14:4d:ef:34:7f:61:b3:
db:fa:d6:2c:04:cc:f8:a3:fe:89:53:64:c2:f9:55:c0:eb:79:
ab:7a:17:52:36:e0:45:07:72:2f:7b:45:09:9b:b3:7a:e5:ce:
85:e0:c2:a6:f7:71:c0:26:0b:02:e5:43:2a:19:d4:76:60:4b:
7b:e4:8e:6c:f5:8e:fe:3a:ea:b4:44:48:7e:d1:a7:82:3b:65:
86:f6:74:49:39:6c:59:e5:e8:2e:75:c8:09:47:6a:a2:c1:68:
9e:9d:aa:bb:2c:42:db:87:c1:5f:b4:d0:78:1e:18:23:73:a8:
d1:28:fc:67:64:2a:f6:ac:b1:95:b2:1d:0c:98:6d:f2:18:90:
91:e6:0e:3c:ae:da:1a:5e:b2:70:a6:b1:58:61:4d:03:f4:df:
c7:75:89:86:32:82:b9:da:15:8c:a1:94:b8:61:e0:d7:c0:85:
19:5c:da:a1:10:ec:a6:02:96:36:3e:73:cf:1c:6f:df:22:c8:
e5:4d:05:7c:03:fe:c6:53:8d:8d:60:6e:cf:2d:56:1c:fd:b5:
71:ed:02:91:c2:1e:74:9d:c7:07:7a:a7:08:b8:00:5d:b8:25:
f3:41:e3:ec:df:12:ae:67:a6:3d:73:8e:d7:11:64:1d:8f:20:
34:45:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:07 2025 by rpki-client