Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: yhH8Wr9j+3jhcpUsnYyJwCyJm2jv8uMBSH65lJHBRkc=
Subject key identifier: 50:AE:42:59:AB:04:8C:45:56:77:F9:7C:04:C1:9C:0D:57:2A:8F:8A
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 01988FFDF78CAACE69A58B866F659E3EE6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 18:00:42 +0000
Manifest this update: Sat 09 Aug 2025 18:00:42 +0000
Manifest next update: Sun 10 Aug 2025 18:00:42 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: CHEDzdL9heW4snU5JrnyGW3Mv52/1CQ4Cq79svVUrzk=)
2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:f7:8c:aa:ce:69:a5:8b:86:6f:65:9e:3e:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Aug 9 18:00:42 2025 GMT
Not After : Aug 10 18:00:42 2025 GMT
Subject: CN=50ae4259ab048c455677f97c04c19c0d572a8f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:cb:26:fe:80:b2:51:ae:16:d3:62:f2:3a:
aa:55:11:5c:41:f4:51:77:4b:6d:8d:05:52:34:26:
e4:14:0d:20:50:85:68:f3:0c:54:2e:6d:f6:63:04:
0d:0b:5e:31:64:2c:cf:f4:4c:46:20:08:fb:37:ff:
7e:51:8d:3d:97:d7:08:2e:8b:16:26:33:16:67:50:
16:76:94:25:48:53:94:f5:71:73:be:51:d7:8f:c2:
2c:60:7c:57:f8:17:eb:01:d1:d1:49:4a:41:68:9c:
6f:2f:93:b8:fc:d4:97:0d:bb:64:71:21:b9:bb:cd:
da:a7:b7:23:14:76:79:30:9c:4f:f6:78:f1:35:56:
40:09:f0:ed:f6:ba:2b:1e:01:63:6f:69:75:39:f5:
75:25:88:5a:1d:2c:ef:c0:1c:3e:d3:f4:7e:bb:09:
b5:37:3f:c1:b7:b2:8a:5e:7a:e4:56:6a:bd:af:5f:
4f:1c:18:7b:59:71:79:16:2a:c3:c7:c3:08:d8:63:
8a:71:1f:dc:55:30:ab:20:35:e1:23:84:1f:b3:ad:
ba:65:2d:7e:ab:d7:65:f3:a4:87:53:e0:50:3d:91:
37:08:94:6a:2f:72:7a:1c:de:53:51:fd:f6:d0:54:
01:88:f8:67:e2:70:64:25:a6:84:08:92:2c:d7:72:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:42:59:AB:04:8C:45:56:77:F9:7C:04:C1:9C:0D:57:2A:8F:8A
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f8:c5:69:7c:8b:ea:f1:f5:a9:7f:a2:6d:61:b7:79:35:a3:
d1:36:3d:43:3f:4f:97:03:c8:af:58:c3:b4:a3:5b:31:0d:2a:
da:e6:88:ab:4f:b7:ff:16:ad:c0:ac:9b:99:7e:08:c3:57:1e:
a1:5d:dc:5d:46:ab:a8:8b:b7:c4:35:dd:52:ad:50:2f:93:13:
d1:16:bc:99:eb:22:80:a9:fa:f2:6e:06:63:57:68:05:5b:75:
f8:17:21:35:bb:68:17:3d:ae:26:bc:16:74:31:5e:b6:85:92:
4b:ff:76:86:f0:88:44:b2:82:fd:f1:bd:fb:64:ea:84:3c:ce:
d4:0c:61:66:96:06:d0:16:56:4c:e3:20:bb:b8:8d:77:aa:8b:
5b:64:cf:d1:e7:fd:bd:15:82:5d:e1:99:0e:ce:0f:78:28:96:
d9:f1:ad:3a:0a:0f:9d:96:b7:6f:81:15:b5:1f:2e:eb:fb:db:
94:8e:e5:c4:e8:a1:ae:2d:c8:14:99:01:84:66:8b:46:e6:e6:
ce:11:a3:fb:cb:eb:0f:dd:fe:fe:63:bb:3b:71:aa:de:f8:f6:
dc:42:de:ba:af:eb:dd:ba:e3:cf:6f:3a:c3:78:18:03:74:f0:
8c:16:1d:3b:48:bd:a7:e0:3e:e0:01:49:99:a0:1c:57:1d:56:
6b:a9:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:47 2025 by rpki-client