Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: 2XtWCz39ce2r7mgRACBZf1vSBMlOHFPsm6dlEN8ROF4=
Subject key identifier: 9B:D4:DC:6A:90:7D:8C:72:E5:9A:05:DC:06:87:13:1A:64:17:CB:2A
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 01989FDED30C92698CBF5C9FFC52852453EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0B23
Signing time: Tue 12 Aug 2025 20:00:37 +0000
Manifest this update: Tue 12 Aug 2025 20:00:37 +0000
Manifest next update: Wed 13 Aug 2025 20:00:37 +0000
Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: G6/NIxfgZiC1kyd+RKiRWMjfzXus4rtEVt1p9qrC9AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:d3:0c:92:69:8c:bf:5c:9f:fc:52:85:24:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Aug 12 20:00:37 2025 GMT
Not After : Aug 13 20:00:37 2025 GMT
Subject: CN=9bd4dc6a907d8c72e59a05dc0687131a6417cb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:a3:61:45:35:17:9c:06:ac:a3:1a:ca:ce:
48:e3:e1:fc:31:64:42:b0:35:e4:57:04:45:7b:c1:
8a:0e:d8:17:bf:3c:20:a9:43:b7:f1:37:ee:3c:0d:
92:d4:8b:b4:75:67:b3:84:b5:59:e5:1a:71:d9:7f:
ed:ec:a2:f8:47:63:de:32:64:03:1b:11:5d:fe:a6:
bd:8b:33:32:5a:4b:2f:d2:e0:59:8c:96:1e:6c:62:
b0:94:48:9a:1f:ae:b4:7c:e2:c3:6d:01:2b:cc:52:
7d:73:f9:7b:b0:34:62:82:a4:cc:e4:c6:ea:eb:4d:
5d:60:c6:a7:a7:69:2c:0b:9c:88:2f:c0:66:1e:40:
44:9a:85:bf:c4:05:0e:3f:7d:6c:dd:35:05:dc:4a:
2a:76:5c:7e:17:18:7e:f2:77:1a:ac:c2:76:58:c6:
5b:f6:50:ec:19:66:a9:17:ba:14:00:f3:59:b4:cb:
79:6d:49:84:5f:49:17:5e:32:89:da:67:1b:9a:0b:
46:9f:82:88:d9:75:50:94:c9:75:9d:12:8b:9a:4a:
f8:a6:7d:84:36:11:7e:fa:f2:bb:d1:e2:ee:01:ea:
20:05:97:09:30:13:f7:68:86:8e:23:85:df:8d:51:
1a:5b:1b:6b:80:19:9d:b6:a1:cd:b9:0d:b1:e2:ed:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:DC:6A:90:7D:8C:72:E5:9A:05:DC:06:87:13:1A:64:17:CB:2A
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:33:08:21:4a:8f:60:3d:f1:38:2b:20:4a:0a:c5:c2:93:
e2:84:6e:1a:94:9c:8b:90:18:a8:e5:2f:1d:35:45:ad:47:52:
57:ac:ff:88:24:84:0f:1b:64:b6:d7:09:84:4b:8e:21:79:d9:
53:f1:4e:bb:f0:ac:da:a7:13:e0:11:72:a9:45:92:4b:ee:cd:
70:2e:63:66:2b:81:02:0a:05:d2:07:be:d0:44:33:f2:99:59:
d2:30:c2:12:7b:f7:9f:69:21:eb:be:f7:c8:e7:fb:ee:5d:8e:
37:26:31:bf:d6:02:e0:12:87:c2:2c:e2:b0:4c:63:08:88:86:
b9:28:e2:4b:13:76:5e:87:10:d0:03:a9:13:55:3a:bb:02:3d:
4a:42:6f:e8:11:b2:86:9d:9c:ed:78:b4:0a:04:46:bf:b7:29:
0c:28:f6:3f:c6:00:75:d6:f7:79:0f:e7:9c:91:28:4e:6e:63:
80:29:4e:fd:e9:ec:7b:f1:fc:0d:f5:a1:11:4e:9c:e0:60:d2:
71:e2:52:46:57:fd:f9:0f:75:02:ef:17:d1:ca:04:d5:41:88:
11:db:6b:88:66:87:9c:fc:03:8b:0f:e1:fb:f4:b3:4d:2a:2a:
da:a3:63:b8:14:73:95:b6:af:14:4e:3a:b4:2e:c0:4a:be:99:
92:c1:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:53 2025 by rpki-client