Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier: vYTAbrEKb85RoDAMLl4Hdwox/3KhXM7QNtVp3ycRLHQ=
Subject key identifier: DD:62:05:8A:A2:04:6C:38:35:E2:58:BE:D2:A5:E6:05:1D:62:F6:12
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 01989F03AFD4A773AB992BCF02821D7FE1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number: 10B7
Signing time: Tue 12 Aug 2025 16:01:15 +0000
Manifest this update: Tue 12 Aug 2025 16:01:15 +0000
Manifest next update: Wed 13 Aug 2025 16:01:15 +0000
Files and hashes: 1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: KU786c9Bk+o2+Mie46w9tL3bOL63r0Zb3gr1PJz3KGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:af:d4:a7:73:ab:99:2b:cf:02:82:1d:7f:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Aug 12 16:01:15 2025 GMT
Not After : Aug 13 16:01:15 2025 GMT
Subject: CN=dd62058aa2046c3835e258bed2a5e6051d62f612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:d8:ba:54:72:d7:90:cd:37:36:06:26:42:
8a:f0:65:56:7e:f5:bd:cc:97:80:bd:09:b1:44:53:
6d:1c:43:90:d6:27:b0:50:9a:b7:ca:27:40:06:b3:
4b:91:63:6f:1d:60:f4:94:3b:43:b8:ff:ec:db:9d:
3b:fc:e2:9c:a8:a4:66:de:93:0d:a9:71:68:77:a7:
93:00:97:50:1a:02:85:2e:35:34:b6:2b:07:3f:78:
5d:51:0a:ff:ff:05:bc:47:1f:2c:74:6a:08:30:19:
0f:60:ba:08:59:7c:7e:f9:82:ba:94:d2:8f:54:81:
93:5e:43:91:bc:71:e3:83:11:f7:33:f4:3e:12:60:
25:76:4c:a9:e0:42:44:e1:68:88:1e:8b:6b:cb:ba:
2b:57:29:b5:2a:2f:aa:fb:35:10:61:99:08:74:4b:
6b:78:a1:85:f4:c2:b5:e6:f7:50:cc:26:dc:e1:09:
c9:37:1d:02:ed:66:0d:9a:cd:45:c6:75:76:63:a0:
e2:91:a4:a5:3e:c9:86:1d:fa:7b:20:a7:bc:b1:5a:
15:16:75:d9:31:29:8c:de:17:78:4b:0f:93:a1:4e:
1c:fc:e3:1f:1d:4b:75:54:ae:bf:55:62:f5:7c:22:
9a:10:c6:c3:9b:6b:fe:b9:70:2e:de:2f:07:71:3e:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:05:8A:A2:04:6C:38:35:E2:58:BE:D2:A5:E6:05:1D:62:F6:12
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:8d:aa:df:f0:0b:4a:2d:b7:57:15:26:75:c1:fa:0f:da:
1e:e9:3a:e7:14:bc:d1:26:9e:93:ac:44:01:d0:c7:0b:3c:60:
08:f7:85:1a:42:7a:58:25:72:75:bf:b2:84:c8:b1:ef:88:11:
f4:c9:ba:98:dc:0d:27:a3:b0:94:7b:d5:46:87:ca:84:45:48:
c3:4f:21:84:f1:21:c8:bb:df:93:85:f1:62:36:64:00:b4:e8:
c3:8b:10:62:28:15:65:ef:47:2a:82:34:24:7b:53:b8:9e:b7:
a8:39:06:f9:03:63:01:00:95:cb:cd:f4:d2:ad:14:d8:f1:3c:
4b:57:a8:f4:23:31:2c:b5:d0:03:85:aa:58:90:50:c8:4f:53:
c5:64:94:21:92:c5:8c:ad:64:21:69:e9:4e:d6:d5:4b:5d:96:
8e:e0:38:5e:55:68:b5:5a:f0:76:1f:69:2a:c3:00:19:c9:7b:
b1:30:f2:b0:3c:2d:9f:ea:0e:7c:18:64:47:b4:2b:ac:62:c4:
84:21:a9:96:5f:5b:98:3b:4f:f7:76:f3:18:57:72:97:c9:d7:
69:9e:88:90:02:18:45:36:e4:9d:f3:77:51:d7:bc:52:26:18:
02:3e:61:12:af:52:44:7b:a6:f7:f8:c7:79:5b:84:34:9d:28:
56:a8:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:15 2025 by rpki-client