Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: wK05xFIddFFnJmDGgBucs3r9i1dt9Ky0X5NyZtLLkjE=
Subject key identifier: 61:7B:38:53:37:7F:E9:0B:78:00:08:6E:6C:99:46:7D:CE:59:D0:EF
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 01987CAE334A1AB38C876B7B501FE06ACBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 00:00:47 +0000
Manifest this update: Wed 06 Aug 2025 00:00:47 +0000
Manifest next update: Thu 07 Aug 2025 00:00:47 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: u3i9NuwsNsA/L5SuwIcZgL+3OVYPhDt/tVMPBuzaO9Q=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:33:4a:1a:b3:8c:87:6b:7b:50:1f:e0:6a:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Aug 6 00:00:47 2025 GMT
Not After : Aug 7 00:00:47 2025 GMT
Subject: CN=617b3853377fe90b7800086e6c99467dce59d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:91:04:c8:ef:ff:26:88:8c:31:72:46:0c:
b6:7e:19:3c:48:70:80:5e:f0:88:4f:60:8a:48:a8:
b1:4d:0c:ca:7f:57:71:75:3b:c8:d3:dc:7b:4a:38:
7c:92:9d:e3:0a:53:9c:b4:1d:5e:d6:dc:b4:3f:3a:
09:e5:bd:4e:4d:85:7c:8a:e5:c4:68:eb:66:fd:e5:
15:4b:11:60:b3:1c:a4:c7:cc:01:fe:58:e1:85:2d:
61:d8:10:28:ce:be:64:86:d2:33:f0:cc:25:78:9a:
09:93:23:38:29:f6:06:2d:63:a3:ae:e7:5e:29:0b:
c7:af:f0:93:4d:b0:98:a5:b4:23:7a:47:b5:51:42:
0b:eb:ca:70:2b:03:32:ad:68:cb:a6:db:06:b6:6b:
2b:82:36:69:d7:0d:7c:2d:f6:73:88:d2:e0:1c:40:
5b:4f:41:f1:df:66:13:9c:83:95:99:d1:f5:92:ca:
32:99:99:2d:ad:a9:90:be:71:1c:35:55:e9:61:f3:
b9:9b:b5:9f:95:d1:a7:0f:f3:9e:87:b8:36:d4:02:
c2:5c:21:3a:b9:f7:b5:39:9c:ea:e2:d3:4d:64:f8:
9b:21:85:e3:1d:83:a1:c5:8d:6e:f7:4a:f7:2e:c1:
f6:ac:aa:18:2e:ca:bf:ef:01:ee:cc:8a:77:dc:af:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:38:53:37:7F:E9:0B:78:00:08:6E:6C:99:46:7D:CE:59:D0:EF
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a0:31:d2:db:5c:70:b4:ef:58:b6:6c:88:30:83:3e:05:64:
ad:1d:22:85:ac:f2:2b:8a:5b:ec:ed:e6:41:e9:55:10:b0:4c:
66:81:dc:e3:d1:2c:85:bc:a2:ad:ea:79:f0:77:08:ee:3a:03:
6e:19:e0:2b:6a:c0:bb:d5:e6:fd:ce:cb:b9:b0:60:07:1d:00:
52:3f:2e:b2:dd:53:4a:40:71:10:cb:81:18:01:fd:7c:26:0d:
d5:45:c3:7e:5c:5b:d2:1f:56:3f:fa:7d:36:b8:e8:85:e9:5c:
4f:2d:25:4e:83:de:2e:3b:66:81:74:85:dc:17:d1:be:d4:48:
cb:8f:56:c7:bc:90:48:6f:fc:66:e9:05:a1:36:b3:66:c4:e3:
ff:5a:c7:bc:90:9a:c8:82:3d:46:33:37:2f:de:d2:76:c1:51:
42:ce:20:be:fd:df:ea:2b:8a:28:3e:85:13:a0:2d:08:f3:96:
e4:2d:3a:4b:5b:aa:a4:65:f1:c5:eb:d5:bb:47:91:c1:95:f2:
f1:f4:72:c7:d2:16:64:44:9e:bf:21:30:98:ab:a0:08:64:f0:
d5:2b:bc:db:2e:bc:66:26:29:f9:7c:9a:03:f6:ba:80:03:f5:
8f:98:10:6c:93:66:25:98:50:ee:cc:1b:e6:fb:e8:34:79:e2:
1e:ab:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:35 2025 by rpki-client