Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: AJcYuUrc7/9lFZNYBurJqie0gN62BzIbjBaktwulgCs=
Subject key identifier: 55:F2:37:DB:02:3B:F6:8C:2C:AA:62:34:47:46:96:38:68:3A:AC:48
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 01988921A316B517812E80084D5AB50465E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0C80
Signing time: Fri 08 Aug 2025 10:02:19 +0000
Manifest this update: Fri 08 Aug 2025 10:02:19 +0000
Manifest next update: Sat 09 Aug 2025 10:02:19 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: NT7X0QBUCZibzjPgy7pPWXgYXvTgeDddI8ejM7e823Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:a3:16:b5:17:81:2e:80:08:4d:5a:b5:04:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Aug 8 10:02:19 2025 GMT
Not After : Aug 9 10:02:19 2025 GMT
Subject: CN=55f237db023bf68c2caa623447469638683aac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:3c:b7:e8:f2:4b:59:ee:4f:48:16:9c:32:
7b:b6:da:14:5f:59:f5:c1:02:69:65:4c:f7:ef:60:
e3:56:d6:bf:7e:06:5a:e5:7f:d3:0e:57:b3:37:38:
b4:6a:bc:59:92:8d:3b:77:8a:b8:f1:9d:6c:bb:9e:
d9:9f:18:54:4f:57:fb:fd:50:51:c0:ca:69:b4:8a:
e0:f2:68:ec:b4:fd:60:1c:15:b4:8a:f4:b0:63:22:
72:34:b6:ed:f9:86:e8:3c:ea:d9:4a:47:ae:b7:2f:
93:7b:1c:d4:23:e4:34:d9:19:78:cf:7a:b8:95:47:
20:20:6e:bf:71:2b:8e:bc:fd:5d:f8:2a:48:1b:fb:
d8:1e:09:92:64:a6:f3:d8:f8:b4:de:ab:d1:8c:dd:
34:98:82:6b:29:a0:90:af:ce:fe:3a:70:99:d4:22:
52:e3:92:19:f8:ca:52:12:af:b5:bb:fc:5e:d9:f9:
e3:4b:2e:e1:1d:8e:26:8e:5e:fe:dd:0e:ae:f2:35:
0e:8a:65:b7:1c:54:09:84:ee:10:49:2e:59:a4:7c:
87:0a:a6:da:05:bb:74:0d:82:40:36:d1:cb:a4:74:
c8:37:b0:d1:a5:c5:c6:9a:f3:71:a8:4e:df:b8:bd:
b3:cb:6b:17:8d:e5:75:18:a7:95:37:2a:b6:8a:89:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F2:37:DB:02:3B:F6:8C:2C:AA:62:34:47:46:96:38:68:3A:AC:48
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:9a:40:96:fb:f6:1a:f9:ba:d9:59:fa:71:aa:b5:f4:15:
b2:1d:df:54:0a:f0:74:db:6e:94:ff:21:3d:3e:ab:af:2e:48:
cf:78:d9:6a:ee:d7:df:97:2a:e6:8d:5c:23:07:58:26:48:63:
8d:6b:00:d5:e5:6d:ea:11:07:1b:1a:0c:43:26:c0:35:0c:92:
cb:c3:9e:ad:fe:2f:cc:6f:83:70:50:1a:8b:18:be:f5:56:89:
9d:ea:d8:91:9a:1a:6f:31:ac:b8:68:89:ba:f6:49:cb:b0:4c:
76:28:e7:e9:f6:65:06:50:65:63:2b:3a:7c:ca:b0:87:1f:d2:
de:a2:46:a3:1e:4f:a8:9e:9d:9c:54:86:52:81:5a:cf:e2:45:
3c:12:b8:4d:65:c6:7c:a6:33:31:88:87:2c:6d:0e:f9:fa:a9:
64:77:c5:5e:c9:cc:62:0b:f4:56:40:47:53:40:1e:46:b2:3f:
65:66:f9:4a:28:7a:ab:40:d9:a8:a3:d6:4f:f2:c3:89:2f:2e:
e2:6b:b5:95:bd:97:48:16:71:7b:8c:70:7e:e9:89:92:dc:dc:
64:48:fe:97:e9:62:91:49:56:26:23:94:ce:e2:93:36:e6:f1:
f2:61:4b:1a:ac:ea:53:e7:33:13:f9:03:bf:f1:87:35:17:51:
c5:d8:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:17 2025 by rpki-client