Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: Ipg0ptzFFN1FoWyMoC03M6K0DpVnrywQgTSJADwamJg=
Subject key identifier: 91:49:09:2C:A9:F1:A2:F0:0E:D3:85:EE:C3:5C:58:6D:BF:97:97:CC
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01987450710A058EE4ED6106D5EE98756EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: tQCBfYZl+0Qh5WkFA0bwTKuhulA8r65qX+NSl2+Rj64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:71:0a:05:8e:e4:ed:61:06:d5:ee:98:75:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=9149092ca9f1a2f00ed385eec35c586dbf9797cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:c9:80:4d:65:be:31:39:f8:f3:1d:a7:b3:
f9:ae:3a:54:af:fa:d9:77:b4:53:2e:9a:f2:db:20:
35:6d:31:bd:fa:f0:4f:ab:69:ec:de:d0:17:c0:fe:
65:f7:18:79:11:01:42:49:fd:25:27:b7:bf:fc:f3:
7a:d3:d5:17:ae:28:e9:6c:1c:12:db:e7:4d:8e:49:
15:af:84:57:0e:de:ea:41:0f:52:f9:86:14:a9:eb:
19:c9:1c:88:37:44:82:4b:62:38:31:7f:15:97:87:
96:a7:99:b6:57:85:25:98:84:d4:af:ba:7d:e0:40:
21:4a:3a:85:d3:27:fc:54:fe:a4:24:ba:16:01:4a:
61:3d:0c:7c:a8:ba:ad:ad:bf:26:ba:af:2d:c4:d6:
ea:c3:24:74:52:86:70:4b:ed:07:2f:f8:79:bf:51:
ae:28:d0:82:58:a9:f9:03:78:ed:4a:b5:bc:de:a1:
3f:b4:de:65:41:ea:51:e7:e4:12:0a:13:ee:33:90:
85:fb:1e:db:9a:74:c3:b5:a1:2d:38:4a:d1:cf:56:
4b:e0:37:ee:47:77:58:6a:c0:72:4c:c0:c8:4a:f8:
b7:21:a0:1d:72:e5:b5:9a:d4:ae:d9:2d:ca:a2:01:
70:ca:77:db:02:0a:4d:11:e1:32:4a:79:dd:74:6f:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:09:2C:A9:F1:A2:F0:0E:D3:85:EE:C3:5C:58:6D:BF:97:97:CC
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a1:67:ee:94:42:4e:7e:8d:85:a5:9f:68:ad:ab:2d:c5:57:
32:bc:7a:79:91:24:c7:06:c2:5d:f1:ff:8d:d0:24:9c:7a:76:
66:87:66:bc:bc:45:e9:b9:0d:78:53:5c:21:09:47:71:1e:1b:
0b:5d:9d:5c:0e:30:2f:07:8a:6e:6a:a1:71:e5:9b:a6:48:51:
91:c8:ae:75:c2:a2:b7:54:a1:75:6b:ea:d9:44:93:34:f6:d3:
05:24:a3:00:b0:07:ff:b3:d0:e7:7b:1b:c9:f1:11:94:20:24:
2d:55:dd:c8:cb:53:06:11:fc:45:7b:62:b0:45:c4:c1:74:61:
7e:55:2d:50:03:d0:b2:40:3f:6f:eb:0f:2f:c1:0c:91:b2:2f:
d0:d4:7b:67:82:6a:31:9e:3c:26:9c:ce:a5:e2:b8:ae:b9:8e:
0d:b0:94:9c:36:02:82:04:a8:11:f8:06:33:d6:52:0b:4d:b8:
ea:83:e1:5b:56:3b:70:d0:65:a3:cf:56:dd:3b:f6:cf:33:4f:
0f:40:07:68:ab:a2:ea:e3:9a:99:36:40:8d:5a:7f:7a:67:ac:
0f:de:a1:3a:09:eb:36:be:f8:0a:78:c0:9c:17:12:ab:60:2e:
3a:a0:78:f0:5b:0c:90:95:21:48:79:11:e5:0e:db:00:58:ad:
87:c3:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:07 2025 by rpki-client