Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: eTio+8m/fiGLUxPBvSduxqA62Hj0Hf6QVjbP0uoHcLs=
Subject key identifier: DE:BD:A1:09:60:54:84:15:F9:FD:23:50:3B:1D:2F:87:4C:B9:BD:18
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 01988DA1F88BBA7692B3F61859417EFC3757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 07:00:58 +0000
Manifest this update: Sat 09 Aug 2025 07:00:58 +0000
Manifest next update: Sun 10 Aug 2025 07:00:58 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: W1P4JbHEUoOnl29IAI5WIetWCJ0HL6F4Dv+L0qGfPfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:f8:8b:ba:76:92:b3:f6:18:59:41:7e:fc:37:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Aug 9 07:00:58 2025 GMT
Not After : Aug 10 07:00:58 2025 GMT
Subject: CN=debda10960548415f9fd23503b1d2f874cb9bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:3e:15:ad:01:1b:5d:0c:e1:21:e2:06:2b:
df:9b:22:f4:62:b3:13:1b:ab:99:5e:2d:0c:85:ae:
d3:41:42:f9:40:38:18:55:69:8c:57:2b:1c:bf:d5:
b3:34:de:23:85:06:7f:28:b4:ba:99:5d:68:39:da:
78:c2:19:df:d3:0e:d0:dd:58:49:1c:41:8b:c2:62:
dd:56:0b:3a:ba:fb:06:30:6a:38:e8:6c:f9:01:c3:
9c:e1:24:73:a9:5a:5a:f9:22:1e:73:64:65:07:13:
7a:25:18:b0:9b:29:39:76:6e:c8:b5:f5:97:88:51:
15:5b:38:33:49:03:62:2c:7a:f2:00:ba:73:66:55:
15:d1:d6:23:ee:77:06:c6:67:67:d1:0c:e2:55:d5:
ff:30:7e:ac:04:b8:93:46:55:72:83:22:35:ae:b3:
5b:7d:85:7d:28:a6:12:cf:95:0d:70:f5:28:85:7c:
8d:54:75:bf:a2:f9:19:15:d9:5e:8c:13:da:9f:87:
49:c4:48:3c:f7:43:74:8c:5e:ff:09:89:e8:79:1e:
be:04:6b:42:69:91:7a:3b:20:2e:42:51:f7:b4:af:
46:fe:fc:48:77:7b:7b:b0:02:fc:46:cf:dd:67:39:
0d:eb:fe:0b:a4:89:dd:0e:5e:ec:26:1b:a6:8a:29:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BD:A1:09:60:54:84:15:F9:FD:23:50:3B:1D:2F:87:4C:B9:BD:18
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:31:97:5d:56:4c:52:ba:52:42:99:f5:f8:b5:6a:e1:e0:b8:
42:db:6f:76:0e:14:b5:7e:d7:a1:72:72:57:8f:78:8a:f7:fc:
4b:8f:4d:21:74:95:2a:bc:2a:4a:3c:1c:b6:c7:44:57:11:12:
fa:a1:0c:3f:00:31:e8:b0:12:10:d5:db:0e:a2:90:63:a5:b3:
8b:4b:4b:da:4d:f0:98:df:38:4c:31:38:fa:a2:ea:8b:72:25:
a4:92:13:3f:cc:c1:ec:08:78:84:77:42:05:f5:9b:c3:ef:45:
ff:94:f1:5a:f5:27:76:ab:59:9e:74:fd:8c:bc:fb:6d:4c:ef:
c4:28:37:be:8a:70:00:0b:5b:74:a5:1b:f8:d4:48:10:a9:81:
32:91:89:7a:2e:d7:89:a6:5b:bc:cf:5d:5b:9c:e4:76:da:69:
77:23:da:bf:1e:1f:d8:e2:c1:49:b9:9e:c8:01:a2:e2:64:dd:
b4:9e:ad:4b:e1:bb:11:3d:6c:d8:96:b7:d9:25:e0:1a:06:e4:
f1:c0:7c:56:5b:b8:42:29:19:91:d4:b0:09:19:78:4b:82:29:
a8:a8:84:24:98:78:8d:f8:2b:4c:86:73:15:31:83:7b:a2:e2:
2d:8b:9f:a0:34:ad:01:d6:84:2c:e7:f5:ea:f1:1f:1a:e3:08:
a4:f5:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:32 2025 by rpki-client