Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: bSxVW3tkOs429jxqqJMI+UZ91sp/vu0nR7vmmleSWSY=
Subject key identifier: A2:B0:D7:AB:A8:57:36:81:11:E4:0F:D4:1A:31:BB:CD:70:4F:A0:B2
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019885B1FC0DF3DDC9D248E5D9AFD9FE7B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 18:01:30 +0000
Manifest this update: Thu 07 Aug 2025 18:01:30 +0000
Manifest next update: Fri 08 Aug 2025 18:01:30 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: o84s2LNoXy2icKqtWCjhX3Qi4ly17jyuqrX+UZyX+OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:fc:0d:f3:dd:c9:d2:48:e5:d9:af:d9:fe:7b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Aug 7 18:01:30 2025 GMT
Not After : Aug 8 18:01:30 2025 GMT
Subject: CN=a2b0d7aba857368111e40fd41a31bbcd704fa0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:e5:ca:d9:1a:6f:c2:8c:e5:be:70:d6:28:
68:d0:3d:bf:49:13:dd:cf:b6:86:e5:48:fa:f4:c4:
9d:11:65:80:c9:92:04:88:50:ae:e1:b3:23:8d:d5:
e0:08:9d:9c:20:e9:15:b2:31:47:4e:79:44:52:15:
03:74:b3:51:1b:e2:09:9c:b6:f3:ad:cd:b2:f9:e1:
74:fc:a2:74:36:41:30:6f:bc:55:87:14:64:b3:a0:
35:81:2d:90:7b:2e:27:12:09:7e:1d:76:40:ce:81:
be:04:b6:67:3e:d8:8f:cd:7f:e6:2c:e7:78:34:d1:
0c:a5:c6:83:c4:86:0d:53:6d:93:9b:d0:e9:5b:4d:
d6:b4:b7:9b:92:d7:8c:7e:56:5f:1a:35:c5:c9:18:
62:5a:d6:49:be:84:03:84:95:ae:c4:17:8e:ba:4e:
92:a8:ba:f1:81:15:ec:fe:c9:fc:b4:e2:af:f6:2f:
4a:21:99:b3:bd:81:67:eb:32:7d:df:eb:34:13:38:
6e:f2:19:50:c1:2d:b7:6e:8f:0b:cf:57:2e:b1:9d:
f5:73:ac:a5:49:c3:b2:66:5d:fd:c4:2b:59:7c:78:
21:11:df:50:2b:d0:1c:6e:1c:bc:8f:75:07:35:32:
58:7c:2a:75:0f:12:82:3f:7b:bd:f0:db:5f:9f:d2:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:D7:AB:A8:57:36:81:11:E4:0F:D4:1A:31:BB:CD:70:4F:A0:B2
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:dd:ad:37:34:35:da:d2:7a:e5:e4:8d:4b:3d:a6:f7:3d:
95:e8:c7:0d:06:75:13:27:8b:75:64:c5:ab:92:8d:f9:2b:77:
9a:37:8c:ac:3c:90:6f:e2:08:a2:de:a5:12:5b:53:47:51:1e:
34:a4:2e:78:aa:91:61:46:44:9d:30:2c:00:a3:f6:74:1e:81:
be:16:70:f3:72:f9:aa:94:96:be:64:02:58:5b:89:a6:c7:4c:
5b:d8:41:c9:9b:88:b4:a8:68:6d:87:84:ce:93:ba:3c:b3:4f:
1e:7e:b9:82:9d:6a:00:51:61:fd:72:f7:2c:f4:36:fe:35:bb:
b7:ce:a4:51:a0:95:20:95:77:67:a2:b6:02:13:73:a0:af:93:
c5:e5:a5:a3:19:8b:57:9c:0d:3a:3f:dc:3d:0b:9a:8a:cf:8a:
5c:5e:87:b4:0f:33:31:21:e7:3e:4a:e3:b8:e2:94:8a:f3:67:
f5:0e:75:66:b0:50:4b:64:da:b9:c9:ba:21:ba:9f:0d:56:ad:
88:d4:f4:36:ca:33:f6:bb:9f:96:b6:f8:84:1c:72:83:0c:73:
f1:dc:2e:c6:f9:91:70:36:8f:2d:da:37:a1:b3:14:75:25:42:
79:47:c4:56:32:46:84:9b:7b:a8:93:f3:26:a1:eb:e4:50:fb:
ca:ad:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:18:56 2025 by rpki-client