Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: kgTGn2Uoe2JgvMi0ms0fmoZRtdORBL7nLo1ZSMs8aUc=
Subject key identifier: 04:E1:DD:BB:A7:FA:0B:D9:C1:A4:4A:8D:51:4C:25:29:3D:68:78:03
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019891108FABBA13C82C431CA71B89C5F821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 23:00:38 +0000
Manifest this update: Sat 09 Aug 2025 23:00:38 +0000
Manifest next update: Sun 10 Aug 2025 23:00:38 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: YwUyOlUZI1ooFIE5HAFQ3OrcgkwnMOSqr6Ah5gPb8AQ=)
2: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (hash: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:8f:ab:ba:13:c8:2c:43:1c:a7:1b:89:c5:f8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Aug 9 23:00:38 2025 GMT
Not After : Aug 10 23:00:38 2025 GMT
Subject: CN=04e1ddbba7fa0bd9c1a44a8d514c25293d687803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:46:db:09:9f:c5:db:c6:51:1d:a9:33:2f:
eb:ef:02:13:a5:15:a1:07:1f:e7:f9:e2:3d:b9:eb:
d7:34:f6:a5:e3:36:5a:54:6a:17:63:9a:55:55:8e:
1c:1c:c8:ab:aa:f3:56:b9:0d:a0:27:ff:4f:28:27:
25:93:a3:ac:94:79:b7:30:6f:07:02:06:c7:fa:91:
c1:31:84:7b:f6:71:d3:0a:5d:95:4c:a9:68:c0:ed:
44:88:a2:c7:fb:4c:c2:60:01:0b:94:b4:ca:d5:05:
9c:7a:a3:3c:92:60:8e:4f:de:c4:6d:9c:b8:b9:fa:
04:3d:25:41:06:b9:b4:dc:e3:f3:e8:22:8b:a4:f6:
b1:98:7b:00:c9:4d:13:40:30:bc:e3:a3:1c:98:21:
7c:ce:a5:c0:fc:ee:1b:df:c0:1f:34:d5:3b:c5:d0:
26:08:29:48:00:e0:45:03:1a:2c:81:ab:d0:d9:64:
aa:c7:2a:12:94:61:90:ee:76:e4:bf:e3:a3:1c:51:
84:73:69:a6:d5:62:93:33:03:58:0c:08:fe:20:b4:
dd:bf:36:48:0d:0f:31:64:4d:76:71:73:30:bd:5e:
8e:2a:2f:f4:4e:f9:d8:b8:ae:56:4c:d3:86:e1:a6:
25:f2:f9:55:ec:f7:e6:d0:00:81:b1:c1:69:ad:6f:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:DD:BB:A7:FA:0B:D9:C1:A4:4A:8D:51:4C:25:29:3D:68:78:03
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:94:91:1e:58:b2:19:7d:6c:03:5f:7a:9d:33:1f:f5:3f:
e7:84:49:64:02:88:01:27:33:fa:28:74:35:dc:eb:c4:80:f9:
17:92:33:9f:a9:39:ea:76:e4:0f:51:ea:4d:45:43:ca:de:af:
85:ad:7c:3c:61:ec:de:8c:3c:89:83:4d:82:5a:ef:86:70:cd:
00:80:b9:e8:75:93:72:d2:c7:b1:8b:fa:a0:5d:ba:ba:ce:29:
58:9c:6d:6f:6a:22:15:b3:a2:fd:af:6f:bc:b6:93:c5:6b:4f:
72:a6:e3:5a:aa:b0:f2:2b:90:80:fd:bb:9b:54:84:e7:93:6c:
17:e3:2f:30:05:5d:d7:ab:a0:63:c7:ad:bd:29:37:7b:8f:f4:
98:d7:bd:c1:81:b8:b2:08:05:71:03:2e:2a:f7:55:92:8c:3b:
d3:f8:07:7d:7a:be:84:3b:cf:27:f3:b2:f7:6c:43:6b:48:14:
6e:ac:7f:01:3b:aa:e1:73:bb:1b:8d:11:f2:88:c0:dc:21:b4:
a2:f4:06:40:47:8f:09:c5:e1:c1:d1:8c:99:69:17:65:69:f0:
47:02:66:de:21:d9:4d:8d:b2:57:74:e9:be:61:ff:8f:68:69:
c5:1f:d3:73:45:5e:2e:80:71:fa:55:e8:c6:f6:bd:e2:62:3d:
6d:fc:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:27 2025 by rpki-client