Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: W1zV8U489B7lGRFzcMchPaSISosiih6OcSiL4YBRF8E=
Subject key identifier: 5F:29:A0:0E:12:93:89:CC:F3:1F:A5:A5:FA:1A:9B:9D:CC:0A:0E:F0
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019873E2647D41A3F9CC17B0548E40598BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 078E
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 8fvZnXfhcchV3mtevMHcOTuJGhy6afUgeid4Bx+7eac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:64:7d:41:a3:f9:cc:17:b0:54:8e:40:59:8b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=5f29a00e129389ccf31fa5a5fa1a9b9dcc0a0ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:91:cd:65:f9:5b:6e:7b:b0:14:b0:6c:8c:
87:03:04:67:94:8c:a6:b1:d3:3d:51:ff:e8:b7:54:
47:55:2c:13:cf:1d:c5:75:3f:7a:32:30:1d:0b:86:
aa:9f:80:0e:29:a1:30:d0:e4:23:09:5c:87:78:37:
23:8b:22:9c:a7:b4:e4:10:a4:be:a3:21:b4:16:67:
3d:8d:03:ba:34:ae:8f:a1:02:e3:99:22:35:81:98:
fa:cf:19:e9:4e:10:8f:ae:d3:00:fc:74:22:70:2c:
3c:7c:9e:7e:29:f3:8d:f8:49:76:a7:68:90:4c:58:
d3:1d:09:50:23:87:ed:1e:3e:1f:2c:6c:40:86:d5:
4a:76:62:e1:87:2c:63:d5:79:0a:61:53:39:89:37:
fb:08:5e:0f:e4:07:cd:55:8e:82:1d:88:b7:ec:28:
43:6c:a2:5a:2b:89:8e:b3:33:ba:57:f0:a8:e2:80:
bf:18:88:0b:d3:4e:f3:f9:32:2c:bd:b1:ca:1f:56:
07:06:8f:a3:a9:c6:91:c4:c3:17:36:ba:dd:6c:67:
4f:2c:c6:0f:a3:6a:c2:b9:2b:57:c8:03:0c:fd:2b:
a4:8a:b5:f5:bc:9f:e6:46:33:e6:b7:4a:14:f7:4d:
8f:6c:c3:9c:3b:1a:48:98:88:fe:ab:d4:be:91:c4:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:A0:0E:12:93:89:CC:F3:1F:A5:A5:FA:1A:9B:9D:CC:0A:0E:F0
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:df:5b:80:4e:1d:5d:37:e0:bc:61:65:9e:fd:2f:af:ed:
f7:1e:f0:68:a1:f5:51:7a:79:ba:0b:43:f6:c2:91:85:40:29:
c3:2b:36:fd:b4:ce:31:39:c2:5f:3e:9f:80:4f:fa:43:97:17:
f7:99:d4:7a:09:0a:a9:f0:91:f9:ca:75:8e:bc:67:93:62:b2:
97:8f:46:64:e3:d2:52:0a:f5:d8:81:9c:fe:8f:56:50:27:3a:
09:45:e5:c4:88:29:0d:0c:46:57:24:68:19:7a:33:27:37:8d:
eb:ec:c7:7f:08:13:01:0e:08:4b:0a:7c:66:65:b5:1e:4e:a2:
e8:3b:b9:b6:7e:6f:7c:15:a6:f1:3f:68:09:87:17:a6:cc:2f:
6d:2f:0d:a0:52:bd:20:56:a0:0d:ac:d7:2f:27:37:0f:2f:95:
50:5a:61:0e:82:8d:34:f3:6e:fd:99:bc:e5:04:04:98:5f:09:
c9:0f:3e:41:bb:ae:cb:3d:4c:62:84:1e:29:91:88:9b:47:04:
7b:9c:13:aa:05:db:3f:02:a4:77:3c:8c:70:c8:77:36:b0:31:
03:0d:3b:9a:e9:6e:46:c4:e9:55:85:35:6f:37:3e:4c:cd:34:
07:75:3f:3e:16:42:85:3a:28:e0:3d:4f:8b:a7:99:85:85:72:
7a:f5:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:38 2025 by rpki-client