Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: ghU+gs83lJHZEyFAR1paGr+8mfpThALslF7cIs/1DsE=
Subject key identifier: D0:7F:BC:95:62:E6:EB:03:AA:EC:63:6E:CC:22:BB:89:5E:E2:9E:64
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 01987D8A1719B249A996EC0174E430A7A01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 0F20
Signing time: Wed 06 Aug 2025 04:00:58 +0000
Manifest this update: Wed 06 Aug 2025 04:00:58 +0000
Manifest next update: Thu 07 Aug 2025 04:00:58 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: 5UOrWt9P/8045lBk+uC4OKC3uXbFFXyN7xVZ3bhLPDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:17:19:b2:49:a9:96:ec:01:74:e4:30:a7:a0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Aug 6 04:00:58 2025 GMT
Not After : Aug 7 04:00:58 2025 GMT
Subject: CN=d07fbc9562e6eb03aaec636ecc22bb895ee29e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:06:63:3e:0e:20:d2:92:f5:ca:16:28:55:
ca:5b:63:4c:87:dc:e2:93:b6:cb:af:76:c2:a6:e3:
ed:06:fe:df:03:9c:e2:98:27:2a:4e:1c:c3:19:18:
52:b5:10:ba:54:55:b4:42:65:d9:9c:72:28:94:08:
3a:e9:29:32:94:29:9d:c5:a3:dc:0c:9c:b7:98:35:
14:c3:01:75:b3:11:30:92:77:05:4b:1f:25:1c:0d:
45:1d:9a:a4:ac:8f:b7:9e:52:90:20:e8:f1:11:9d:
9f:95:2f:00:62:87:34:11:4c:57:70:3a:1b:a2:00:
df:a2:29:40:ae:f6:8c:f7:4b:de:b7:ad:c9:d5:f0:
7a:aa:01:1b:b0:d1:a0:88:18:63:06:91:98:a3:94:
d5:66:f3:a8:38:97:94:42:4e:2d:93:07:c0:8c:26:
d5:e2:c7:6d:f7:8e:62:33:58:5e:3f:d9:ed:3c:d9:
44:6a:9b:09:63:20:b6:78:f0:8b:17:fc:9b:90:35:
8a:bb:a6:f5:34:5f:52:de:21:69:81:cc:ed:a1:f0:
73:27:8c:e9:8d:5b:7b:9c:fc:d9:e0:e2:94:53:9d:
dc:67:38:89:f2:38:dc:f2:4b:74:f9:01:1d:a8:fa:
01:25:60:ae:80:96:c3:8c:45:bd:0c:ff:81:8d:9a:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:BC:95:62:E6:EB:03:AA:EC:63:6E:CC:22:BB:89:5E:E2:9E:64
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:a6:31:48:bb:e9:c5:c6:18:40:3c:2b:a4:48:6e:e8:7c:
c9:86:52:49:6a:c2:6e:95:1c:eb:a1:2f:ff:20:d8:97:22:c1:
de:8d:c3:b0:41:c9:1c:f9:db:e9:52:fe:b3:f0:22:61:a7:01:
b4:97:66:fc:89:db:fd:fc:34:6a:d7:af:b5:65:f7:f2:86:e2:
5f:74:69:7d:84:9b:c2:3d:9e:81:a5:24:dc:72:d2:ad:2a:05:
6e:c4:15:23:7f:7d:2b:3e:34:3d:8b:31:ac:53:26:1b:8e:df:
f2:24:39:c6:35:e3:54:ea:74:1a:72:3c:49:6d:ef:9b:bf:4e:
35:7d:b3:9b:b8:54:65:26:85:fd:a1:94:d0:7b:17:b9:bf:29:
5d:83:b7:c1:78:f5:a5:eb:63:0e:2a:c4:bc:ff:67:af:f4:ce:
cd:b8:6d:0e:65:df:a5:79:de:3f:89:22:2d:7a:89:24:e0:ac:
b1:70:f2:46:3e:ed:82:9b:08:4f:43:96:34:52:31:58:00:39:
35:53:48:4a:f4:a1:fd:ef:82:ed:d5:f4:96:3b:fe:e7:4d:d8:
64:97:d2:89:66:53:70:78:4a:e7:aa:4a:a9:dd:d6:70:32:bd:
80:a1:76:b1:51:71:0f:3d:37:ad:f8:d9:11:cb:0f:ff:34:9d:
7a:6c:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:42 2025 by rpki-client