Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: jqzJdqKFYnHlw+xaNbNIB/zK5rDsQhoKnqrl/26YJeE=
Subject key identifier: CA:7C:C3:EE:DF:A2:EA:24:DC:22:FE:DC:40:D1:77:06:AF:2F:35:55
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019879AD84A72D26443FD520E845316E2198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0817
Signing time: Tue 05 Aug 2025 10:01:11 +0000
Manifest this update: Tue 05 Aug 2025 10:01:11 +0000
Manifest next update: Wed 06 Aug 2025 10:01:11 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: 8RXi4/RkcMrcfK/LNCJuTRRzYBRYMpgN9x3z8TpXcSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:84:a7:2d:26:44:3f:d5:20:e8:45:31:6e:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Aug 5 10:01:11 2025 GMT
Not After : Aug 6 10:01:11 2025 GMT
Subject: CN=ca7cc3eedfa2ea24dc22fedc40d17706af2f3555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:54:50:cc:ba:ce:c5:e8:9e:8b:91:59:a6:
5e:7a:22:eb:91:25:8c:87:8c:e8:2b:03:a6:02:28:
8b:01:c0:fe:b4:72:55:37:ce:29:53:db:ff:e8:1c:
d3:1f:ca:ef:8f:53:3b:ed:af:05:a6:fa:f3:17:46:
bd:dc:03:06:68:d9:0e:9d:5d:f7:78:8b:63:d4:17:
dd:c0:69:65:39:91:23:d1:b7:24:61:8f:9d:5a:7b:
d4:1f:1c:f8:64:46:af:13:ad:37:4a:04:51:ec:ed:
a8:63:12:22:e6:70:29:34:ec:c4:4d:1a:1f:3d:71:
be:65:ee:d4:6e:1b:b0:03:d8:9c:79:5a:6f:d3:81:
88:a8:c0:a8:1a:6d:c3:43:f5:45:ba:01:44:69:49:
57:7b:87:e9:20:1c:de:a9:95:a4:af:1c:22:db:44:
27:d3:b9:9b:db:8c:62:85:a1:85:ca:26:ee:5a:cc:
c6:d0:bf:ab:41:c5:e8:3b:c8:c7:9b:d2:f6:48:22:
e3:72:6c:98:e1:4e:d9:53:49:42:22:39:c8:c4:0c:
a6:bc:8b:5b:e8:3b:24:e9:a9:00:0f:93:3c:16:4d:
db:da:f2:b3:a1:11:8d:3e:a3:7c:87:3d:1a:a8:fa:
51:84:a1:67:f3:be:26:0f:52:6f:d1:97:d3:34:11:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:C3:EE:DF:A2:EA:24:DC:22:FE:DC:40:D1:77:06:AF:2F:35:55
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:57:7c:bd:51:3f:22:85:b7:77:05:b7:19:86:65:bd:3f:e1:
dd:e6:4d:19:9c:37:4a:76:8a:78:dc:18:9c:70:5f:d4:40:9c:
d5:d0:ff:ac:9c:e7:10:8e:4e:a5:7a:2f:bc:42:6d:76:0f:16:
ba:39:32:84:ff:70:91:73:df:01:99:db:5a:2b:41:52:c8:8c:
86:8d:b4:9f:3e:c8:34:3c:a0:f2:c5:94:79:ae:63:5c:c4:83:
a1:23:35:a2:a6:e2:95:f2:a9:65:6d:89:d4:39:d5:49:79:b4:
da:49:76:ba:2a:a6:eb:22:83:5b:9d:e3:7a:fc:bb:84:ba:1d:
dc:f8:26:8e:4e:20:b7:3f:aa:dd:ce:f0:3e:0f:98:f9:70:aa:
d0:71:56:27:d1:2b:cc:51:16:e5:8d:e1:49:fb:09:b0:74:83:
dd:28:5f:a9:95:f5:3f:a8:95:42:c1:5d:bb:4e:da:68:3b:20:
1f:f9:78:b4:5a:52:fa:a0:ee:6c:62:6d:bd:51:32:90:4f:bd:
33:31:56:e8:44:79:6b:15:e0:bb:1d:86:e0:87:47:20:52:81:
0b:c9:82:80:38:25:b3:75:b2:96:a0:f8:79:35:ec:9d:66:91:
a3:07:0d:13:77:03:a7:75:76:96:d2:d0:e8:be:62:c1:21:11:
00:ba:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:38 2025 by rpki-client