Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: CZJ7MTbdbhhudlAmSgzoTKK8NGdNDwFp57YtmeUJW+0=
Subject key identifier: 33:AC:C5:B6:DF:D5:89:EC:45:CB:F1:27:73:10:47:29:BD:2E:E4:F9
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 01989411D85EC4CD334FC194C61A32425559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 01DC
Signing time: Sun 10 Aug 2025 13:00:54 +0000
Manifest this update: Sun 10 Aug 2025 13:00:54 +0000
Manifest next update: Mon 11 Aug 2025 13:00:54 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: Ll7vCm+0qDvxRTrIlkhPeybfJ7QPwAl1EMSof2/XTe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:d8:5e:c4:cd:33:4f:c1:94:c6:1a:32:42:55:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Aug 10 13:00:54 2025 GMT
Not After : Aug 11 13:00:54 2025 GMT
Subject: CN=33acc5b6dfd589ec45cbf12773104729bd2ee4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:74:6c:d8:9d:8a:32:ce:4b:c5:e1:06:25:
04:ad:ec:0a:71:5b:72:4a:8b:8e:aa:49:41:d2:7a:
4b:57:ff:b2:b2:74:78:4b:ef:ad:b5:91:e0:c6:b3:
32:4d:15:3d:da:53:83:25:d6:8e:d5:d2:0a:31:34:
8c:02:4e:45:e9:51:40:02:2d:aa:4b:2c:e8:9e:63:
6a:66:88:81:38:67:b3:e4:91:21:95:b7:20:2f:5e:
d8:b5:22:38:33:1d:b8:d0:eb:43:b8:5a:e6:36:74:
5a:71:c7:15:4a:1f:92:55:7f:39:fb:5f:38:52:0f:
78:8b:9f:25:e2:7f:c4:98:58:c8:a7:4e:b8:d1:ba:
5e:e2:ee:17:00:ae:a6:6c:f6:d4:9f:4e:ed:b4:92:
f7:fc:75:cd:f4:31:c1:cc:bc:bb:32:5e:b1:17:3e:
c5:78:83:df:00:12:24:96:ea:8f:7b:16:e0:8b:62:
fb:0e:e7:ed:10:08:04:75:3a:04:d6:4b:5f:83:a2:
6d:ac:b6:af:e9:8c:38:1e:d4:ec:d5:d5:86:6a:1b:
2c:16:d9:bc:ee:15:fe:33:c0:03:04:e3:d1:ab:3d:
41:99:5e:49:0d:87:d2:0c:04:f3:74:a3:9a:c9:42:
22:f5:af:ed:13:38:96:23:03:a9:a0:5f:14:35:76:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:C5:B6:DF:D5:89:EC:45:CB:F1:27:73:10:47:29:BD:2E:E4:F9
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:ee:d7:bb:a1:60:05:36:0c:c4:62:d0:d3:0e:29:1f:b0:
e1:9d:3f:ac:f3:0c:7f:80:7f:05:77:0a:e1:7c:4c:72:19:b6:
c7:e9:72:87:f7:ed:44:14:f5:dc:e3:09:b2:f8:da:5d:ee:92:
75:48:3b:1d:4b:a6:91:8d:53:f7:cc:9f:4a:0e:d4:97:bf:6e:
c8:fe:6f:3f:ea:c1:96:9a:08:77:5c:a4:5a:04:89:9f:1f:86:
cc:93:46:63:c0:c0:44:9d:7c:93:b2:94:8c:21:35:f5:e7:2f:
17:33:64:ac:2f:64:f2:bd:ec:bf:58:c7:40:59:fd:a9:3c:ac:
6f:a6:80:83:2a:03:87:9f:c1:65:3a:4a:a7:6d:46:3c:47:f5:
e5:fb:75:e3:19:1e:25:d8:88:50:94:b0:3d:92:85:38:2c:39:
88:6e:d5:98:f5:8e:40:da:de:9b:8a:1c:e6:16:ff:f2:f6:0f:
6e:dc:42:5c:46:8e:37:ad:57:92:c9:96:a1:61:3a:cf:d0:c4:
40:9a:60:6c:bc:b6:43:99:d2:29:51:dd:5c:4d:d4:c0:a0:ed:
a2:1c:24:a5:df:5a:16:0d:0f:3f:04:68:93:33:d9:50:3e:42:
46:a8:a8:37:7b:32:d5:08:91:90:15:60:20:9c:76:98:ae:88:
7d:a0:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:12 2025 by rpki-client