Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: SFLxKIs9ut4kRIdA/Zek4Gny87LBIfmhrNlmkRT4ghY=
Subject key identifier: 6A:88:74:99:AC:25:AE:C9:9F:FF:67:F5:06:4E:28:0B:24:CF:FF:B7
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019885B20A368C5D0DDBC70045EA762FAA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 095B
Signing time: Thu 07 Aug 2025 18:01:34 +0000
Manifest this update: Thu 07 Aug 2025 18:01:34 +0000
Manifest next update: Fri 08 Aug 2025 18:01:34 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: wtdCViIrgQR4hy1M9QXVYX7K4Psi5oa6Pv+vo4e7DH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b2:0a:36:8c:5d:0d:db:c7:00:45:ea:76:2f:aa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Aug 7 18:01:34 2025 GMT
Not After : Aug 8 18:01:34 2025 GMT
Subject: CN=6a887499ac25aec99fff67f5064e280b24cfffb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:4d:b8:1b:fe:ed:86:08:a3:b7:93:55:8c:
7d:af:6b:33:e1:64:7e:a9:af:09:b2:cf:ba:7b:fe:
cf:ec:b5:0f:c0:54:b5:d2:6b:f6:88:ba:ef:cd:61:
61:aa:38:50:ef:b6:13:9b:38:41:99:94:19:f7:98:
e4:24:08:46:11:33:84:93:99:52:77:18:26:a4:16:
83:a7:d1:66:6a:07:23:8e:c8:82:42:38:d5:e0:61:
94:7f:f2:0e:66:fe:02:92:4d:07:6b:b4:2e:ba:41:
d6:0b:42:78:67:12:b1:1b:a7:62:58:44:12:c4:1a:
28:00:be:db:95:dc:f6:56:13:91:16:a7:d8:ed:be:
ba:90:53:a4:22:c8:b8:61:7c:60:99:ae:01:89:df:
7b:64:01:ed:5f:6e:1b:53:77:83:ef:9e:6a:a8:cc:
87:58:59:49:f6:f0:c1:e2:fe:fb:44:88:2a:22:fb:
c1:f6:83:5f:d0:ec:16:14:b3:19:9d:14:b0:f5:38:
c2:69:99:90:6d:46:25:7e:48:e9:3e:a3:7f:17:c5:
98:bc:a8:f1:20:72:6c:73:1e:49:37:f5:a2:ac:3e:
5f:b2:95:16:24:9a:aa:88:ee:e0:f3:16:a7:6f:16:
44:96:35:9b:20:e6:2d:2b:fd:52:b6:1d:2f:b3:56:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:74:99:AC:25:AE:C9:9F:FF:67:F5:06:4E:28:0B:24:CF:FF:B7
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:d6:4e:2e:09:06:e9:d1:a8:cf:9a:6b:17:85:fc:4a:45:
6d:51:9c:3d:50:8d:bb:3e:46:71:99:e3:d1:e9:ab:cd:05:58:
ea:06:91:f2:ab:59:44:b9:26:ab:dc:bf:86:ac:aa:0e:4a:bf:
66:47:75:e6:a1:a3:cd:ba:0e:c4:fd:85:3c:6f:08:bc:ad:35:
78:61:9b:3f:54:5a:cd:a2:7a:4a:bf:19:dd:70:15:5a:4e:c2:
69:fa:3f:af:e3:12:3e:50:72:e5:1b:42:a6:49:2c:bd:68:1e:
ed:62:88:4f:07:c7:4c:b9:8e:2a:48:f2:77:39:a0:66:ba:e8:
47:bd:1d:7f:9f:e4:af:13:2c:bd:9c:0d:8d:7f:f3:19:99:de:
6d:a0:72:82:b4:ed:4b:5e:8b:56:dc:1a:46:4b:b6:0d:41:14:
ab:38:43:23:56:cd:c0:ea:76:10:fb:74:d9:e8:3a:2c:aa:f9:
2b:72:b1:b0:e1:bd:44:30:9b:73:3c:f8:0a:32:53:58:a8:3c:
bb:98:91:d8:3a:e5:01:9e:b8:f7:76:cd:66:84:1f:ee:78:4d:
e3:8b:b0:89:c7:1e:99:fc:6b:27:37:44:e8:00:97:0e:08:1c:
71:3e:c7:93:96:d5:74:24:f4:2d:a9:f5:18:f7:f4:56:7b:2f:
2f:7c:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:19:17 2025 by rpki-client