Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: aqh8NMFWnSWLTC91tTgCrPbyYEWXLmKqxFBLoKGhj58=
Subject key identifier: 4B:C8:F7:FB:2C:87:81:6F:3A:C8:26:CF:B0:27:97:67:BF:B1:6A:0D
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 01988B7D82EDCA0031C3E08CC6C1D86D7BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0182
Signing time: Fri 08 Aug 2025 21:01:55 +0000
Manifest this update: Fri 08 Aug 2025 21:01:55 +0000
Manifest next update: Sat 09 Aug 2025 21:01:55 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: M96JqC8oocYYJ0lm62s/yhC+D9ccwew1kY2UCJ/+lXk=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:82:ed:ca:00:31:c3:e0:8c:c6:c1:d8:6d:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Aug 8 21:01:55 2025 GMT
Not After : Aug 9 21:01:55 2025 GMT
Subject: CN=4bc8f7fb2c87816f3ac826cfb0279767bfb16a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:c6:26:e8:62:74:5a:a4:bb:cf:e8:6f:98:
d0:04:c5:a9:4d:94:69:1f:7a:a9:64:b0:d9:f5:45:
38:f8:6c:66:aa:d3:d2:8b:02:3e:40:32:70:22:91:
72:5c:58:f9:27:d2:61:5c:a7:72:39:09:3a:9c:1f:
7a:a7:ee:3b:21:b3:75:b1:aa:6a:03:43:1f:5c:37:
a2:eb:4e:23:9b:c4:bb:eb:1a:c9:31:a7:9a:8d:93:
99:47:49:8d:ea:90:b1:03:35:fa:7c:64:38:89:2d:
c1:31:cc:56:72:19:90:6b:80:93:3f:2c:ca:28:27:
91:f9:9b:ff:2d:0d:f1:f6:1d:fc:26:67:ba:f7:50:
56:ec:3d:df:ca:2a:6a:ba:84:e8:ae:b8:7e:77:e4:
67:41:53:d7:dd:1a:22:6c:65:3a:68:da:6a:75:a5:
2e:fb:c4:f3:7d:68:78:d6:12:7e:eb:43:63:3e:50:
27:79:ed:99:ec:3e:f8:90:4c:c1:5c:f1:ff:51:b4:
23:e4:77:ff:5a:35:98:94:f4:55:c0:dd:f1:66:fe:
f1:2a:39:52:84:e5:11:e5:2b:85:da:31:52:9c:c1:
bd:7b:92:f4:d9:f7:30:89:3e:16:7c:25:ed:04:8d:
a6:9d:34:07:bf:79:d1:9b:7b:ae:3e:0b:23:d1:13:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:F7:FB:2C:87:81:6F:3A:C8:26:CF:B0:27:97:67:BF:B1:6A:0D
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:ff:f1:a6:2e:33:bf:ba:b4:4e:87:e9:04:a9:69:14:cd:
6c:01:89:b5:b5:fe:d7:1f:ea:cb:4a:a9:2a:43:3b:74:42:b5:
7f:89:77:32:00:3d:f2:fd:e7:11:ac:09:2d:fe:ec:e0:b9:f4:
1a:c2:d7:78:b3:f2:1f:c8:90:d0:4f:4c:71:ca:34:41:e5:78:
2c:fe:e4:80:86:bc:b8:7a:51:74:61:78:14:36:e9:b4:1d:80:
09:d9:43:d7:38:f4:8e:ef:0a:c3:fc:01:2e:96:db:12:dd:57:
c6:5c:a9:e7:5f:4f:56:da:51:ab:64:49:41:ab:9d:cd:99:49:
eb:20:30:fa:0e:a6:98:ae:40:f4:6b:8f:db:4a:08:fd:ac:43:
c4:85:f4:bd:e5:0b:e2:35:93:d0:c5:ce:d3:3e:50:18:0b:a1:
ff:1a:46:ea:43:67:90:8f:ae:ba:c5:81:02:79:7b:b4:ac:08:
a0:18:70:60:e9:10:83:2c:9b:77:c1:fa:4e:f8:0c:28:f4:2a:
3a:7e:f1:5a:0f:3a:13:ed:fa:20:81:fa:8d:4d:1e:b5:62:0f:
2d:fe:ca:b2:98:e6:74:ae:4e:6f:cc:58:8d:f4:70:42:c0:aa:
5a:4b:cb:b6:47:38:56:59:96:29:c0:7f:27:fa:8f:39:79:09:
59:f1:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:44 2025 by rpki-client