Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: uW2B6FkPfu5u4uVkVtZzu5ejS6kf+nDnt/xN3UQPG8A=
Subject key identifier: E7:5B:5C:0A:33:E0:FA:C7:72:DD:F3:00:EE:67:D6:25:17:8C:CA:CE
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0198880D5333DB3F64FAB485028A59991797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0D88
Signing time: Fri 08 Aug 2025 05:00:31 +0000
Manifest this update: Fri 08 Aug 2025 05:00:31 +0000
Manifest next update: Sat 09 Aug 2025 05:00:31 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: lbQoACwjgxL1lTer9hjUunAJHjSut4ggOkUl/N18TX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:53:33:db:3f:64:fa:b4:85:02:8a:59:99:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Aug 8 05:00:31 2025 GMT
Not After : Aug 9 05:00:31 2025 GMT
Subject: CN=e75b5c0a33e0fac772ddf300ee67d625178ccace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:40:78:c3:3f:41:17:2b:50:2d:e6:e6:11:
10:8f:7e:60:43:f1:76:8e:b8:c8:d0:ce:ae:68:50:
13:2d:41:3c:09:f3:5d:d2:04:f1:82:74:fd:db:6e:
ff:d6:d9:81:7c:06:60:3c:16:aa:93:7f:22:35:a8:
c4:d7:25:82:61:44:ce:19:2f:5a:6f:bb:a5:c7:b4:
66:97:29:4b:b5:bc:a9:a1:30:52:f8:3b:82:95:2a:
53:48:e5:26:71:9d:e4:8a:db:68:32:56:d0:07:6c:
85:d9:e3:50:fc:5d:16:df:4b:1a:fc:46:4b:10:91:
cc:2f:ff:0b:e5:8a:c9:62:4c:b0:a0:1e:e7:9d:64:
d4:99:2e:55:f0:6c:05:54:f7:ab:aa:ea:5b:b4:62:
f9:12:e4:37:d1:33:bf:25:75:55:a5:56:f3:a8:e8:
a1:20:c6:d4:ef:af:3c:9e:a4:5a:14:00:fe:29:f1:
ac:0e:38:21:1e:eb:7d:c4:05:d8:e5:85:88:d9:b7:
22:d3:b3:ee:09:c9:ae:81:1d:b7:2c:9e:96:61:a2:
1e:f4:3e:e5:f2:2b:a1:3f:17:4d:e7:3e:97:99:7e:
30:ca:2f:c9:f2:c5:21:b9:5b:71:9d:66:28:8f:7c:
f9:84:24:7f:2f:21:db:3e:d3:54:64:37:56:f2:80:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:5C:0A:33:E0:FA:C7:72:DD:F3:00:EE:67:D6:25:17:8C:CA:CE
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:66:62:4f:ca:cc:0b:28:b5:61:9b:4e:26:e3:47:67:9f:
d3:87:43:45:2f:31:15:f3:3c:8c:34:bf:3f:0a:0b:60:06:03:
66:07:79:3c:b0:70:27:68:57:22:6d:a0:2d:16:a9:cb:23:b1:
b3:48:b7:f8:6e:96:57:2f:97:5b:3b:0b:5b:03:1b:77:cf:46:
a1:46:e0:63:2c:40:0f:d8:97:6d:ba:c0:e6:93:ae:ea:8e:e9:
ad:a8:cb:7e:8c:17:25:b8:0b:4e:f7:7c:b1:60:0c:67:3c:4d:
71:00:36:34:99:ff:eb:7b:ca:16:92:fd:6e:2f:28:f9:6d:9c:
2f:92:99:38:09:20:8f:8a:0c:e7:fc:b9:17:d3:37:62:31:74:
c4:68:d3:e4:a7:50:76:f6:51:a3:aa:6f:67:b3:6a:b4:fb:08:
cc:45:32:f7:c1:22:62:39:b6:36:94:ee:13:c5:98:b9:9f:82:
01:f1:9a:12:59:81:81:24:f0:c7:fa:73:ea:e4:e0:fe:9b:d7:
40:1f:0a:b8:4e:a5:65:0b:0d:57:fa:31:8b:b0:7a:94:45:eb:
b0:8c:9f:f1:a2:98:e1:40:b0:41:de:19:ee:e7:d8:91:5e:a1:
01:9a:79:62:d4:da:26:a4:dc:35:d6:c1:66:1d:df:55:44:e9:
92:b3:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:13 2025 by rpki-client