Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: UUOGEDZRFvclbhDo2FrfH2Q1L10eB/6caf7uKf4kcwI=
Subject key identifier: 3A:1C:4B:B0:43:A1:BF:B2:C8:05:A8:57:D9:06:0D:CC:57:63:48:C8
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0198A15F843BFDA731E71EFC640CC758F78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 04DF
Signing time: Wed 13 Aug 2025 03:00:48 +0000
Manifest this update: Wed 13 Aug 2025 03:00:48 +0000
Manifest next update: Thu 14 Aug 2025 03:00:48 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: +pNaQKsfaBfpSAY3hNLVXpLgsbjC7tyZL8K3sZTAJbU=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:84:3b:fd:a7:31:e7:1e:fc:64:0c:c7:58:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Aug 13 03:00:48 2025 GMT
Not After : Aug 14 03:00:48 2025 GMT
Subject: CN=3a1c4bb043a1bfb2c805a857d9060dcc576348c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:11:ad:a3:bc:31:62:57:31:62:dd:c0:5e:
f7:34:bb:e5:62:25:6f:71:1f:c5:43:32:cc:cc:89:
6c:55:2a:3f:22:54:eb:2a:a5:ae:e0:ef:8b:f6:82:
98:91:1e:05:37:af:ab:f3:28:f4:3d:17:11:a6:cb:
34:56:f0:8a:02:83:64:ed:30:3a:14:67:29:e6:fd:
fc:f9:76:06:1f:d8:f4:af:2f:59:17:c6:6e:66:67:
6c:0c:b9:4d:05:95:8c:06:70:79:cc:f7:2e:be:1f:
dc:11:fe:54:6d:12:b9:ee:02:e3:52:4d:6f:1c:04:
65:f7:59:37:f8:6d:c9:b0:d1:8a:bd:96:80:fe:10:
13:55:af:0c:c0:9d:7d:59:08:48:16:3d:28:38:d8:
90:93:fb:24:b8:ec:e8:8e:bc:f1:66:ca:80:5a:3e:
8c:b7:bb:91:7e:f0:76:90:a2:ed:18:68:eb:5f:fa:
7b:32:60:5f:eb:8d:ba:f8:27:95:fb:8b:b9:10:19:
90:52:ea:1f:71:37:18:e0:7c:a1:b5:49:2c:83:3b:
03:0d:6e:0e:d1:cb:b4:4f:47:9a:ad:5b:b5:58:4c:
41:4a:44:08:a5:ec:2d:f0:1a:92:5f:56:ab:eb:ff:
e4:5e:7b:88:f6:f4:3c:a0:20:93:cd:c3:cb:28:2a:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:4B:B0:43:A1:BF:B2:C8:05:A8:57:D9:06:0D:CC:57:63:48:C8
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:df:5a:64:ec:65:f5:bb:c2:ef:90:c0:c1:1b:3f:62:b3:
56:34:d3:f9:4f:9c:10:e3:9d:49:af:b8:d6:c8:aa:76:6f:2a:
5e:18:11:be:e7:cc:17:c1:c8:8f:e2:30:c7:dd:52:d6:4d:d6:
a2:3f:0b:79:3d:f8:78:dc:f5:fe:54:87:cc:5d:38:c7:30:30:
01:d7:a3:fb:26:8f:04:7f:b3:47:aa:dc:f8:30:8e:10:e3:77:
44:a1:5c:64:33:e2:94:ef:be:2f:3e:91:26:fb:05:6c:1a:c1:
c0:03:e7:44:65:53:1b:14:88:c7:b1:7f:95:0e:79:67:cf:d0:
14:df:c1:68:1a:20:74:99:13:e1:94:84:02:94:78:1f:24:93:
86:3f:1d:68:94:de:26:b2:5a:03:fb:1d:da:c3:f4:e2:c7:f4:
16:de:08:9c:9e:d9:55:19:68:19:44:10:90:16:d0:4d:fb:ec:
48:5c:2a:a6:77:64:78:f6:00:d3:a0:f5:22:16:f0:2d:bd:85:
70:0a:25:4b:30:4b:50:f9:82:dd:5a:d6:fc:0f:e2:dc:c5:0b:
36:64:25:1d:e8:f7:44:04:9d:5e:3a:64:b5:e3:47:b3:d9:11:
36:60:3f:07:0e:2c:13:29:d6:7e:f1:6e:c4:df:5a:be:b5:30:
d9:2d:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:42 2025 by rpki-client