Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: H6qCH7+VACguh++x1GkzdQ1N9hYICaLIBKfXsDB33gk=
Subject key identifier: 4E:F3:EF:B4:67:D5:0A:DE:70:EE:88:41:BF:D9:4B:A7:9A:6C:4F:83
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 019896DC0174BB1FACB9DE57182DA7415FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0DEB
Signing time: Mon 11 Aug 2025 02:00:57 +0000
Manifest this update: Mon 11 Aug 2025 02:00:57 +0000
Manifest next update: Tue 12 Aug 2025 02:00:57 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: fTmZFDtAZ6mwE05WGxM94sPN9BUuIdlM+IT5EfkE6TY=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:01:74:bb:1f:ac:b9:de:57:18:2d:a7:41:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Aug 11 02:00:57 2025 GMT
Not After : Aug 12 02:00:57 2025 GMT
Subject: CN=4ef3efb467d50ade70ee8841bfd94ba79a6c4f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:f6:55:95:a6:55:aa:f1:28:a7:d8:b1:eb:
0f:60:42:ea:fb:ec:33:4e:ce:53:de:bf:23:9c:18:
46:4b:e5:65:1d:ce:45:21:5d:24:21:b3:b0:33:88:
36:28:57:21:73:9c:ce:b3:72:ec:c8:d8:b4:e9:d9:
3e:ac:93:7a:ed:48:0b:9e:91:65:90:18:d1:38:a3:
08:8d:f4:6f:48:6e:a9:47:e9:8d:bf:9e:eb:5e:b1:
8e:18:24:e0:7b:be:51:77:bc:ec:42:a5:d6:76:1c:
8c:84:d4:67:44:ac:ff:f7:0d:65:33:e1:11:f9:3b:
d3:9d:5e:3f:3b:a4:54:0e:f1:24:4f:ff:94:79:65:
27:88:e3:0e:ed:04:84:7b:61:0f:41:0a:28:fd:9d:
7a:55:70:a9:97:5f:a8:1e:5c:8d:ac:1f:5d:ab:7e:
17:89:bb:5a:c7:bb:ed:52:7b:41:79:c8:0e:11:eb:
57:68:14:26:d0:d6:15:60:d5:67:0b:2e:e6:8f:44:
4f:79:da:71:82:d4:82:4e:cb:06:29:f8:9c:e2:ee:
21:ca:6f:8f:93:71:8d:8a:b9:b0:5a:da:06:9e:f0:
d0:ff:65:0e:be:a1:2a:b4:28:b0:e0:a7:08:8a:ca:
80:5d:ef:a5:b9:3d:32:a1:51:6b:41:f5:b8:1b:0a:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:EF:B4:67:D5:0A:DE:70:EE:88:41:BF:D9:4B:A7:9A:6C:4F:83
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:1d:41:f1:9a:4d:f7:6c:a1:d6:e0:5f:a2:d6:28:01:56:
7f:cf:f1:8f:69:c8:7f:8b:b2:35:28:51:61:f5:fb:bf:07:de:
fd:91:a2:6c:ff:95:a3:15:a5:9f:36:58:f6:06:f5:9c:2a:4f:
59:75:39:bd:fe:85:e4:33:cb:b2:a4:d0:53:5c:d3:e7:1d:a3:
0e:ec:5e:47:53:2c:0a:71:b0:5e:5d:d8:03:6b:db:2a:d3:72:
c5:0a:80:80:69:db:04:05:e5:65:26:84:83:e7:53:06:30:8b:
75:96:2f:87:73:d2:58:d6:8e:84:81:e7:81:d6:64:48:3a:c4:
71:39:08:5a:1e:23:01:e4:7c:1a:d0:4d:e2:cb:52:d4:2f:13:
9f:ee:0b:fa:df:4c:eb:9a:ea:2e:e0:63:f6:2d:e1:f9:c3:b8:
bb:38:52:96:b5:cf:8d:a8:df:74:09:95:5f:48:99:00:99:b1:
93:d8:f9:b5:83:79:08:4f:05:87:70:fb:54:26:71:a1:6d:f4:
9d:78:58:29:c9:09:6a:e4:63:53:e4:cc:2d:61:95:0f:50:c3:
a4:c0:df:b6:f7:49:79:e9:b9:2a:dd:2d:54:1f:ba:73:d7:c5:
d3:f0:64:f4:2c:a0:de:13:db:79:76:c7:66:b3:29:00:78:30:
f0:2b:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:00 2025 by rpki-client