Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: AGakFBeaPqML046jRF02javmHkwUNY435Tj6wkEc1as=
Subject key identifier: 70:2D:8E:8A:C6:D2:A8:5F:A5:50:EC:EA:71:B1:A2:3B:97:C6:3F:BE
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 01988BB3C4DCE53703FF7B577F2E20D62924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 01CE
Signing time: Fri 08 Aug 2025 22:01:10 +0000
Manifest this update: Fri 08 Aug 2025 22:01:10 +0000
Manifest next update: Sat 09 Aug 2025 22:01:10 +0000
Files and hashes: 1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: 8MQw6JwTWoKoWYiPSk3TYMP3j819qYX7BLipy9V3830=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:c4:dc:e5:37:03:ff:7b:57:7f:2e:20:d6:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Aug 8 22:01:10 2025 GMT
Not After : Aug 9 22:01:10 2025 GMT
Subject: CN=702d8e8ac6d2a85fa550ecea71b1a23b97c63fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:02:e2:86:67:06:a9:e4:b6:28:e3:70:0c:
75:7f:af:61:7e:9e:c7:66:26:44:e7:ca:4a:e2:79:
8b:88:62:8b:99:a1:b4:bc:bf:c8:40:1a:a0:88:a2:
9c:0a:0e:c9:bd:15:85:52:1f:07:4b:59:dd:3d:eb:
cb:5e:8a:93:ee:83:a9:99:6a:3b:1a:e7:52:85:37:
69:2b:4b:25:fc:5a:92:4e:73:81:bd:16:51:d7:22:
d1:9e:ba:ac:40:ec:a1:c1:28:31:ff:a1:c4:1e:eb:
0f:8d:e3:85:89:9d:e0:da:75:4b:44:04:ce:e5:74:
35:62:94:30:82:47:52:15:eb:03:cc:27:7f:72:ea:
fc:66:4a:f2:22:39:7d:fb:e7:f9:ec:a0:0e:bd:58:
54:ae:22:49:d4:40:03:16:c0:0a:61:d2:32:93:66:
d9:e0:17:77:8c:94:e4:19:b1:f5:f7:3c:b6:a8:f0:
92:26:8f:79:7b:dd:96:6d:4b:1a:31:e7:2b:0b:9e:
9f:db:16:05:56:a8:ac:d2:ee:fb:9e:3e:a2:a0:79:
50:34:cf:a5:b1:f2:ed:cd:04:63:c9:40:54:78:ae:
9c:c6:e7:61:58:06:61:ea:45:13:42:9b:52:4c:61:
63:4f:a1:b9:05:ad:b2:f9:83:ca:a6:d9:25:be:67:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:8E:8A:C6:D2:A8:5F:A5:50:EC:EA:71:B1:A2:3B:97:C6:3F:BE
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:de:7b:a3:7c:0f:43:69:bd:1d:52:0c:45:aa:6c:37:f6:
3a:8e:75:85:2f:a1:9c:38:d9:20:95:e9:26:ab:2e:7b:8a:37:
49:11:17:45:be:f7:d2:52:e9:5e:73:37:3b:15:55:bd:eb:5d:
d4:70:59:fd:2d:45:73:b2:54:3d:84:ad:2f:90:ae:d3:50:60:
7e:a2:db:33:4b:e4:9b:9a:57:79:1e:2a:1f:45:00:01:e3:4c:
3b:46:3f:d9:fd:07:c0:fa:dc:57:96:be:d4:19:3e:5a:e3:b8:
97:20:27:04:00:82:59:57:59:46:a9:3d:02:7c:92:d5:d8:c2:
f9:df:35:bc:3d:b9:66:07:b1:fc:79:35:42:e8:b5:05:b0:17:
16:1a:86:e8:72:a4:9b:7a:45:1d:d4:92:b3:c5:c6:47:0d:f1:
24:74:9d:40:8e:ae:03:8c:0d:35:c0:ae:6f:46:ad:49:de:2e:
95:4e:0a:23:9e:be:50:66:3a:59:3a:09:53:ff:e4:6b:4d:2d:
fb:36:c2:11:09:0a:25:f8:b7:c9:10:de:b5:22:0c:02:66:96:
1b:3f:c0:55:d7:9d:b8:a3:06:35:df:ca:9e:94:61:ba:3d:53:
68:07:c2:b9:7f:e2:3f:be:7d:a9:3a:45:a8:b0:a1:79:3b:36:
b8:38:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:46 2025 by rpki-client