Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 1ojRS4+RjPt5qJKVSXBITvxMrnAT4eaqOwHcrZVfFQg=
Subject key identifier: 7E:75:A6:B5:FA:49:AD:86:85:92:22:97:43:D9:89:A6:0A:21:46:49
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0198752BF792035B63973E61EB17E814537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0F5A
Signing time: Mon 04 Aug 2025 13:01:12 +0000
Manifest this update: Mon 04 Aug 2025 13:01:12 +0000
Manifest next update: Tue 05 Aug 2025 13:01:12 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: lp/ZIZzLUd2BY6K9AAu1MGCATCe2YEYgMPtj8c3dQRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:f7:92:03:5b:63:97:3e:61:eb:17:e8:14:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Aug 4 13:01:12 2025 GMT
Not After : Aug 5 13:01:12 2025 GMT
Subject: CN=7e75a6b5fa49ad868592229743d989a60a214649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:05:ce:5d:7e:1a:21:e1:6d:54:22:bc:f2:
fa:28:2d:c5:48:58:72:3a:90:1b:e5:f2:83:16:36:
59:1d:13:92:dc:fc:68:9c:50:f3:ee:9d:d6:8b:9f:
91:5c:99:62:76:09:da:4c:dd:60:11:f5:15:c5:23:
fd:b9:8b:ed:a6:be:85:1e:26:8d:05:01:74:a3:48:
e7:fd:5f:7c:c4:07:b7:d9:55:35:55:52:e2:2a:95:
e1:ed:64:4b:75:62:06:00:c4:6e:84:48:f5:e6:be:
45:53:b8:c0:42:10:30:14:88:6c:a7:1d:b1:5f:6a:
f5:6e:37:ed:d9:2d:1b:41:04:d3:80:f0:66:49:cf:
f4:56:06:52:ad:d2:0d:61:d1:55:88:7c:fa:e4:e3:
1b:e1:2c:6a:26:b6:59:45:ab:61:4f:a7:d1:e4:2c:
81:c8:1a:ab:4e:ee:e5:ca:a5:55:b3:5d:05:70:97:
85:5a:19:c5:d7:0e:94:41:f1:69:22:c9:30:ac:11:
4e:4c:af:c3:75:cc:b9:ed:6c:c9:22:79:b5:66:d2:
8b:ec:b8:c2:e7:de:a3:5f:24:3d:aa:b1:0c:1e:b3:
cc:1a:6c:4c:61:78:71:64:18:e3:2d:3c:53:c4:58:
71:24:6b:f3:88:c2:e2:2e:de:09:0c:93:3b:26:3a:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:A6:B5:FA:49:AD:86:85:92:22:97:43:D9:89:A6:0A:21:46:49
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9b:29:95:aa:ed:d0:dd:4d:75:29:7f:c8:6d:14:ab:fb:b9:
0f:ad:a5:2b:d0:f7:48:3f:65:d3:23:da:7f:cc:96:db:04:92:
72:1a:df:6b:b5:2e:7b:6e:9e:4e:ac:74:57:37:46:a2:62:04:
3b:19:e5:2f:34:5e:d2:e7:46:e6:7d:ec:47:67:64:68:d6:3b:
d2:4b:8a:49:e7:08:cb:7c:a7:f8:35:00:1b:a5:c5:f1:3a:e9:
72:d7:e2:69:c1:15:c1:a3:78:7e:00:cd:c8:fc:23:b4:23:7c:
0d:0a:c5:01:1a:8d:48:25:84:57:ef:ef:9c:3b:55:96:09:8a:
f0:65:c2:66:89:04:fb:67:3c:b4:71:39:92:8e:db:c2:c8:84:
cf:2d:de:69:ac:09:7e:e6:3b:ea:71:ab:6f:c8:e9:46:dc:b5:
b9:0b:d1:85:92:96:97:3f:d5:b9:e5:d7:5c:b1:4c:5e:aa:46:
b6:29:ab:15:0b:48:07:52:16:3b:2a:08:43:0d:1d:b8:a9:cd:
6f:23:36:2e:7e:14:5a:ef:5d:f0:82:25:5c:e2:d9:65:ea:e0:
bd:db:24:16:62:30:9a:38:7d:03:83:ac:76:ab:33:73:87:fa:
3e:2e:e8:64:65:00:cf:69:27:72:80:10:bd:f1:55:18:ec:a9:
ea:3a:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:26 2025 by rpki-client