Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: kRxw7ECSslTxyRH186jGBwHYhmp/87ojF440VQgO7KY=
Subject key identifier: AB:93:27:A9:62:02:D3:07:77:42:81:11:D2:2B:41:D6:C4:4D:0A:EE
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 01988BEA8229A8FE4053E81D7ACA5B482319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 0595
Signing time: Fri 08 Aug 2025 23:00:58 +0000
Manifest this update: Fri 08 Aug 2025 23:00:58 +0000
Manifest next update: Sat 09 Aug 2025 23:00:58 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: c523LI8ivkb0K2X7NlMyYzjKhsZjKlfmCqzuMU+1YQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:82:29:a8:fe:40:53:e8:1d:7a:ca:5b:48:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Aug 8 23:00:58 2025 GMT
Not After : Aug 9 23:00:58 2025 GMT
Subject: CN=ab9327a96202d30777428111d22b41d6c44d0aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:b4:71:0d:1c:2a:c9:1d:60:a8:77:ea:80:
e8:9c:f9:0d:ea:eb:45:fe:af:59:b7:7d:22:99:b6:
e2:10:b4:45:06:cf:06:80:61:d7:7f:0f:6d:72:31:
40:56:2d:47:f0:c3:d3:b3:05:a6:cc:07:b6:33:68:
27:2f:59:dd:d5:b4:1e:84:9b:16:a3:d8:42:f2:0c:
fa:85:53:d8:17:27:80:31:dc:7e:1a:8d:54:60:0b:
f7:84:ab:5b:ab:81:7a:6e:4f:9c:bd:0a:76:27:39:
b5:35:f7:72:f8:b4:a8:1b:84:ca:ab:62:53:36:7c:
4b:3d:74:6a:81:48:73:8a:75:1a:23:38:f6:36:9f:
51:1a:63:bb:c5:22:49:f6:14:5a:0a:cd:17:f3:35:
6a:19:45:39:08:1c:90:5c:1d:a7:34:ad:0a:6d:2a:
17:2f:bc:0d:da:09:b5:54:12:36:52:90:33:e0:bf:
76:d3:26:b5:3a:3f:75:bd:01:05:35:b0:46:06:60:
49:a0:43:de:5a:38:20:d7:e4:54:9f:31:10:2e:0f:
e3:cf:55:5e:c9:c4:20:9d:38:48:db:41:82:be:71:
26:b9:46:e1:64:ce:2d:fc:76:67:40:62:8e:7b:39:
66:00:b8:00:61:e7:4a:93:c3:01:60:b6:d6:e3:2a:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:93:27:A9:62:02:D3:07:77:42:81:11:D2:2B:41:D6:C4:4D:0A:EE
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:62:c8:a0:f3:2b:e7:a0:00:96:f7:ac:ad:f0:19:ff:32:
5f:fa:01:09:03:91:c9:e0:c4:6b:63:4d:7d:0a:ec:cb:bf:41:
f8:53:78:03:7d:2f:47:71:e0:33:75:f0:49:58:42:8f:ab:b2:
41:ec:4e:53:55:09:3c:1a:de:de:73:28:df:85:27:7c:22:e2:
46:18:d1:76:3b:9d:4a:d5:ca:2a:29:8a:50:c0:0a:c2:7d:1f:
e6:16:e3:5e:28:e0:2d:9b:48:09:27:c0:6d:af:8a:c3:c6:3f:
ea:d2:96:19:9b:50:f4:c8:0f:5e:ee:a6:a3:35:5e:cc:55:6a:
f0:e4:3d:ac:32:63:db:a7:e8:25:8e:ba:b9:43:9d:51:ce:01:
15:45:ad:34:1a:9f:e5:83:4d:bc:61:8c:74:e2:2e:ae:d8:b5:
b5:3c:ea:d6:d2:91:71:f1:6e:9e:1f:0a:36:49:3f:e4:c8:ef:
fa:a9:b3:52:10:87:1f:62:95:e9:14:c6:c7:b7:cb:49:2e:d4:
61:15:a8:93:59:50:1d:dd:f7:6e:00:ad:80:c4:5d:df:00:f7:
6a:d6:c3:17:03:de:98:2c:b4:83:fe:fd:75:72:0e:35:3e:52:
94:27:c8:42:d6:78:ce:5a:ab:96:82:85:bf:05:e8:58:05:1a:
df:f9:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:19 2025 by rpki-client