Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: 3Jy7yLQXvSw1fGagQ54rh88EESgqT481M5J/pF/Egps=
Subject key identifier: BF:C9:FA:1B:86:16:28:F2:8A:65:E2:A6:0F:89:F4:46:1B:7B:AB:40
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 0198820B871B69B61DBA2CF1B889900D9A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 01:00:50 +0000
Manifest this update: Thu 07 Aug 2025 01:00:50 +0000
Manifest next update: Fri 08 Aug 2025 01:00:50 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: wFejq4v9s3iz8TmIDB/4cFLwH6gEdvqS+QsmSZ/znPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:87:1b:69:b6:1d:ba:2c:f1:b8:89:90:0d:9a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Aug 7 01:00:50 2025 GMT
Not After : Aug 8 01:00:50 2025 GMT
Subject: CN=bfc9fa1b861628f28a65e2a60f89f4461b7bab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:40:4e:09:fa:a4:4e:02:cf:c0:73:b6:5e:
f1:77:4f:af:0d:ba:b6:e1:53:d6:9c:f3:8a:a9:f0:
90:6c:14:01:e7:6a:18:7c:8b:58:04:ce:80:37:9e:
68:e8:de:5a:97:24:c0:2d:82:18:3e:f0:e9:91:2d:
9c:d6:35:b0:1c:9b:e2:8e:d0:77:d9:33:db:4b:55:
3f:a5:1e:54:6d:ac:e6:ad:f0:f1:47:3a:30:26:ac:
46:06:00:9c:a4:ab:5c:d7:0d:da:40:80:f3:fd:af:
42:b6:a9:ab:6d:d8:34:bf:95:f2:a7:e4:c1:00:3e:
94:66:5c:cb:2b:74:98:6c:57:4a:17:9a:2d:b1:9a:
d5:39:17:b3:5f:fe:db:69:e7:a0:56:58:cd:36:9d:
01:51:63:fc:98:84:f8:80:8f:25:c3:47:d4:70:ca:
2b:6b:7d:c6:46:67:a2:a8:dd:c9:79:e5:cd:69:e5:
d0:2f:5f:49:27:4c:81:84:a3:78:0d:71:e3:46:05:
c8:18:83:25:b3:d7:de:89:6a:59:0b:f1:30:6f:ec:
0a:bf:c1:d3:17:aa:11:30:94:1c:0d:bf:29:30:7d:
af:19:85:b7:38:19:e4:2d:2b:b9:f8:41:ba:e1:7f:
91:4c:c3:8c:36:bd:27:1b:3c:6d:21:46:04:b7:86:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:FA:1B:86:16:28:F2:8A:65:E2:A6:0F:89:F4:46:1B:7B:AB:40
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:b0:fc:8d:57:42:b2:95:d5:c6:ec:8a:9e:57:bb:31:30:
6c:d7:a1:f8:d1:46:42:c7:8d:31:d9:6e:f5:13:9e:5d:9c:69:
49:ac:db:8f:45:da:4d:e6:60:e8:ac:83:20:cb:a1:da:9d:5c:
cd:75:4c:d6:b6:84:b4:a6:68:8d:d9:09:6d:5a:67:8c:2a:db:
2b:af:c4:cc:0b:e7:bb:bb:f9:0e:c1:2e:a6:1a:9c:6d:3c:66:
e4:b3:27:99:a7:29:81:b8:44:77:9b:2a:b1:15:f4:bb:cf:89:
48:ae:2f:a3:90:e6:bc:44:7e:19:c6:d5:be:75:2d:b1:e2:10:
d6:06:10:c9:3d:bb:00:06:52:a9:7b:7e:36:b6:75:8d:45:03:
f3:ad:eb:9b:04:0a:d2:c7:7d:9e:91:59:59:d1:fd:b5:5b:9f:
07:ca:79:ab:e6:42:b3:7b:19:dc:63:1f:e6:80:84:52:29:a6:
01:e5:ad:65:60:9d:b6:4f:88:e5:30:ce:f1:e6:2b:5a:b0:5c:
e3:ed:d4:9e:30:e0:48:0f:07:c4:17:5e:66:86:6e:70:ed:75:
5f:f9:73:4b:13:1f:e3:6a:5a:1a:57:ff:37:23:97:dc:5b:34:
8c:06:54:07:10:ef:f6:8c:47:06:36:45:f9:77:02:5e:7b:59:
6c:99:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:14 2025 by rpki-client