Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: dWUXG9IL8eSQpgsXYSKiPmGuE1bTTgoXrlLWiAA8Xfs=
Subject key identifier: A5:BB:A5:7F:FA:EA:BA:B4:2B:10:16:88:BB:3A:94:0C:AA:0D:1F:EE
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 01987C094FCA064284F90B92ECC2311F0330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 15B0
Signing time: Tue 05 Aug 2025 21:00:41 +0000
Manifest this update: Tue 05 Aug 2025 21:00:41 +0000
Manifest next update: Wed 06 Aug 2025 21:00:41 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: ST5E+NYUNdqixFFMLljrVF0YDFrQxVn+xqui8r6tgMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:4f:ca:06:42:84:f9:0b:92:ec:c2:31:1f:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Aug 5 21:00:41 2025 GMT
Not After : Aug 6 21:00:41 2025 GMT
Subject: CN=a5bba57ffaeabab42b101688bb3a940caa0d1fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:82:fd:97:83:31:42:3b:44:05:f0:70:7d:00:
63:26:6c:3a:79:ca:5f:11:ae:24:71:f6:e0:88:42:
ee:58:57:3a:78:d0:51:5a:e1:5e:50:cd:93:a7:55:
bb:f4:b0:6b:d5:67:40:2f:39:e6:fa:2a:0c:c9:98:
ab:c9:b0:b4:d3:5f:c9:96:df:4a:35:74:21:4e:e9:
88:9d:26:f0:da:9f:57:24:51:db:3f:c8:4f:31:fc:
84:9b:da:df:f3:af:ad:7a:ec:51:23:a1:1c:30:83:
38:8f:ce:d7:6b:86:e2:60:92:0c:32:5b:26:b5:73:
09:df:56:50:66:e1:0c:d7:26:0d:a8:68:33:78:9e:
4e:c6:d7:da:b4:d5:1b:98:80:e8:dc:27:01:09:ba:
c1:16:e9:62:81:84:e3:dc:bc:5b:e4:ce:04:b6:c6:
ff:e3:c7:c1:07:f9:24:1b:6b:22:80:c0:92:f1:0f:
51:a7:d8:5a:6a:0b:b9:9f:fc:0a:df:d0:fd:85:8a:
1f:01:a2:8d:40:31:0c:a0:34:ee:35:ee:26:c0:99:
b1:ad:6c:aa:f1:91:63:ee:64:07:c5:77:22:4e:f0:
cb:f2:c6:4d:5f:8e:a7:28:a0:e5:fc:8d:3e:bf:c5:
7d:0f:6d:e1:3a:f6:ba:a4:c6:24:c7:59:2f:cf:01:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:A5:7F:FA:EA:BA:B4:2B:10:16:88:BB:3A:94:0C:AA:0D:1F:EE
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:72:8b:fe:e6:85:01:8e:25:af:ab:70:aa:91:cd:80:b8:79:
a9:de:77:b0:74:89:12:c6:da:e4:4e:b3:f3:f1:3e:a1:55:55:
35:d3:1d:db:15:d4:54:f7:bb:f1:df:84:99:81:0a:55:d5:d9:
dd:7b:e2:88:a6:f9:69:36:5e:cd:96:f2:71:d9:83:06:3c:b4:
e8:74:09:0b:41:8a:4a:ad:26:8b:9f:e8:2a:83:cc:f3:a3:e4:
2c:88:c5:be:a0:95:ce:46:13:48:13:82:48:72:86:c4:f3:cd:
79:0f:77:8f:6d:ef:10:b8:e4:f5:e2:d6:32:b3:f9:b0:8c:3a:
e6:68:90:9e:7b:86:db:61:a0:d7:d6:9c:b3:f0:d1:0e:1d:49:
8e:19:b5:0a:ee:1b:ec:e5:dc:24:41:22:d5:c4:85:38:cb:a3:
4c:a2:3d:be:e0:72:cc:a1:4c:e8:c1:81:e2:8f:b7:d0:9b:46:
44:3a:7b:5c:db:3a:18:be:5e:de:66:22:ba:96:35:4d:ae:6f:
e8:0a:7f:f7:61:c0:be:96:0d:f9:b3:bd:53:7c:38:cb:c6:d7:
59:17:81:89:e3:0d:a2:c1:28:1a:95:88:c1:f5:c6:a1:f7:37:
e7:37:1e:b1:9f:40:90:8d:ed:ae:b1:71:63:8a:b3:4c:7f:76:
fc:11:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:42 2025 by rpki-client