
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: DmpWNBiye9l7fyX3H8K1yyzbiVSKw13QDDOi+qPQI/E=
Subject key identifier: BF:13:E5:1A:7C:DC:F0:5B:C4:66:12:E5:F8:01:A4:65:84:31:89:95
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019872985D1A48F19F114179384E14DB3014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 064E
Signing time: Mon 04 Aug 2025 01:00:44 +0000
Manifest this update: Mon 04 Aug 2025 01:00:44 +0000
Manifest next update: Tue 05 Aug 2025 01:00:44 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: tKUibL1xqJ8cZXSgVdlNUuFOxQs99gnozElnELubsgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:5d:1a:48:f1:9f:11:41:79:38:4e:14:db:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Aug 4 01:00:44 2025 GMT
Not After : Aug 5 01:00:44 2025 GMT
Subject: CN=bf13e51a7cdcf05bc46612e5f801a46584318995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:87:cd:02:75:08:fe:da:8f:2f:09:b2:ce:
b9:36:7d:3b:e0:02:55:a5:2c:f8:29:6b:87:9e:bc:
08:50:bd:14:3a:e0:cf:63:24:7e:de:fe:d9:08:51:
04:dc:ed:b6:68:df:c6:2b:1d:54:ad:c9:ef:06:cf:
a0:a2:26:40:fe:a1:6f:28:12:b7:cf:1b:f6:ff:bd:
66:2f:c8:3a:e5:74:68:19:95:2f:e1:b8:6a:e4:3e:
6a:a1:5d:e3:93:70:0c:8e:61:70:25:72:a2:c9:5f:
ea:d8:5f:56:d2:99:45:63:5e:22:86:f3:c5:92:60:
44:54:e5:ee:a2:82:86:2c:0b:dc:06:c4:b4:e0:93:
a9:e5:e9:8f:a3:95:31:62:34:71:91:63:61:87:8a:
bf:71:a7:a3:3f:0c:06:4c:40:40:7c:25:e2:df:11:
13:4e:99:a1:41:44:5e:7c:20:72:2a:b6:94:96:ea:
91:c6:be:24:b8:24:18:d3:eb:8f:b9:b1:0c:23:da:
4c:18:26:8b:0f:74:c5:85:42:f1:20:5f:72:65:c6:
e4:3c:22:8d:db:e3:57:e9:12:8f:45:d6:23:73:20:
e9:a2:c8:63:58:fc:69:d3:e7:58:4d:4f:f1:a5:63:
64:6e:7a:2a:95:9e:2d:af:39:14:4e:21:a0:cd:84:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:E5:1A:7C:DC:F0:5B:C4:66:12:E5:F8:01:A4:65:84:31:89:95
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:d6:68:aa:2f:93:ae:1c:65:45:52:62:1d:cd:76:17:95:
4f:4c:9b:f1:20:4f:55:36:3f:9f:21:f7:3a:88:4b:95:d6:21:
ea:42:1a:b8:e4:da:0b:9e:7b:31:e0:83:f0:41:90:75:39:25:
3a:b7:b3:2b:a3:8c:a0:5a:56:05:2c:a7:e3:45:25:2c:c4:75:
60:fd:1c:50:f4:67:68:2b:4a:8c:ed:a4:a0:6b:bd:a5:66:44:
ef:4e:29:33:22:28:5f:12:77:76:42:97:bc:a3:a3:d5:ae:b9:
23:28:29:a6:7c:91:62:19:c3:7d:73:8e:72:ef:68:3a:09:e2:
ef:58:98:b6:75:c1:31:81:00:10:20:fa:1d:82:6b:90:39:c5:
99:1e:e5:8f:fa:c2:90:c5:81:a8:cd:bc:f9:be:0d:32:c1:11:
3a:68:f6:83:11:09:85:20:90:a2:30:b4:c3:9f:e1:fa:ff:79:
72:62:1e:a4:5b:2c:5c:24:94:d3:eb:66:97:f8:11:38:12:5b:
06:48:3b:33:d3:dd:fb:bf:65:37:de:3e:41:74:16:68:00:77:
4e:75:43:4b:32:f4:f2:51:0f:02:32:ef:14:52:d5:fb:44:64:
73:aa:88:2a:55:5b:18:fd:0c:1b:71:53:80:67:ff:5e:36:a7:
c8:8e:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:28 2025 by rpki-client