Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: EFe+Sv97qy5kjPkYbdyn/oPFpL6F5BVicnoJ+Rh5Fdc=
Subject key identifier: 00:C0:BF:A2:31:C2:A1:02:BC:9D:36:89:D1:3C:E7:45:75:25:56:FE
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 01987DF87D2884F85EABD72E8FF45702364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 033D
Signing time: Wed 06 Aug 2025 06:01:33 +0000
Manifest this update: Wed 06 Aug 2025 06:01:33 +0000
Manifest next update: Thu 07 Aug 2025 06:01:33 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: CIYSQun1SspYwORfgJKL+39q0w6z40E7whkVu/0c7fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:7d:28:84:f8:5e:ab:d7:2e:8f:f4:57:02:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Aug 6 06:01:33 2025 GMT
Not After : Aug 7 06:01:33 2025 GMT
Subject: CN=00c0bfa231c2a102bc9d3689d13ce745752556fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:f5:41:e2:b6:0e:b5:6c:6b:90:56:45:d8:
73:29:e8:d6:ca:80:1d:f6:07:ac:d6:67:f1:a8:4f:
c5:20:da:11:5a:f9:38:11:29:5a:0b:40:82:7a:58:
85:59:f2:09:7a:73:c3:56:56:ad:f4:48:27:12:e1:
36:d2:c2:a9:f7:5a:59:94:61:20:8a:86:87:39:5b:
e8:ed:13:7c:18:2a:8d:38:95:a2:b7:c9:58:d3:f4:
da:53:de:71:a1:8c:f7:cc:ad:93:fc:e7:f5:ca:08:
f2:41:8a:8f:e2:06:96:76:0f:63:2d:6e:33:e2:04:
53:1a:e2:2a:58:30:62:79:0d:36:de:cb:91:93:24:
c3:c9:30:6a:83:f0:a1:18:b5:0e:ed:80:d6:18:fe:
bc:1d:1d:5d:65:4d:cb:cb:4f:37:88:af:d0:ca:f3:
19:75:87:d3:0c:e4:9b:15:0c:0d:89:5c:c6:81:2e:
d7:14:5a:8e:06:87:fb:e1:1f:6c:b8:c0:99:23:7d:
37:7d:93:c5:c6:9a:4b:01:a1:36:a9:9a:24:57:35:
88:c4:4e:16:e2:43:fa:10:4f:09:f8:30:d7:24:d7:
44:17:9c:f1:1d:1d:e7:5f:6f:a1:8a:ca:b9:d5:64:
6a:b3:ce:de:33:d0:77:3c:e0:78:aa:bc:86:91:c9:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:BF:A2:31:C2:A1:02:BC:9D:36:89:D1:3C:E7:45:75:25:56:FE
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:ef:7b:d3:9f:ce:cb:13:96:0c:91:ad:a0:b3:d5:39:d4:
f9:91:bd:c6:cc:32:34:90:74:62:97:0e:c1:16:e1:0e:56:1a:
fa:b2:77:8a:8a:28:15:42:df:cc:06:66:5b:be:2a:c0:60:02:
96:e3:ce:8f:62:b9:19:84:2e:d9:6f:6a:ef:2d:16:37:a9:da:
f7:74:93:cb:29:4e:6c:eb:55:da:80:f4:fc:22:83:eb:ec:da:
ad:35:b9:32:0b:27:bd:d1:32:f2:b9:58:7d:87:d8:d9:7a:b3:
ef:bb:38:05:13:ff:cd:45:76:81:e0:c9:90:dc:f6:f8:ab:18:
ba:ae:8d:02:f4:44:d5:d4:71:01:ab:52:32:f4:4a:eb:8d:3f:
8a:2b:1b:90:64:98:ad:c5:33:40:00:36:d1:ae:28:09:87:a2:
a5:6c:15:ad:d3:b6:4f:1b:bb:57:fa:e6:ae:c2:b2:c5:3c:04:
4f:6a:38:23:9e:21:1a:a8:84:ad:d3:9b:c4:5f:ab:ae:b2:12:
e8:ec:38:62:b8:fe:3c:15:c5:bc:2e:e7:5f:f8:3c:e5:ea:50:
b3:4e:13:e7:cf:3f:5e:bb:f2:c7:49:1c:63:81:f8:de:4c:91:
87:de:b6:2a:a2:f0:e3:3f:9e:ef:b1:89:12:85:9e:e7:33:e3:
36:59:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:02 2025 by rpki-client