Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: s6DwvMFgmhAXRf2+eY1qGsbK25Evy7dnKfmBO7ohfsM=
Subject key identifier: 8D:03:90:3F:C0:7A:69:C8:D1:8B:46:3B:CE:2D:C6:21:26:AC:FD:3C
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0198782D264062FE57ABFB35AC84A09DF4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 1329
Signing time: Tue 05 Aug 2025 03:01:21 +0000
Manifest this update: Tue 05 Aug 2025 03:01:21 +0000
Manifest next update: Wed 06 Aug 2025 03:01:21 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: SDjc7lJzPAw6OdPq47b2730aYcA9pe4pYMTOkJrq1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2d:26:40:62:fe:57:ab:fb:35:ac:84:a0:9d:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Aug 5 03:01:21 2025 GMT
Not After : Aug 6 03:01:21 2025 GMT
Subject: CN=8d03903fc07a69c8d18b463bce2dc62126acfd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:3a:c0:38:85:21:c9:d3:ea:ac:de:f0:e8:
e9:62:f0:ef:40:56:ba:76:54:ce:27:bc:5a:6d:c7:
8a:8e:f5:6c:49:94:be:92:3d:80:3b:ee:4e:bb:20:
91:12:ce:f3:1f:53:94:89:e5:c5:09:ba:4f:08:b1:
63:6a:1e:41:3b:e9:bb:00:ae:90:49:d3:c8:e2:ba:
5b:f7:66:ae:4c:db:32:cb:6b:70:17:50:44:0d:f8:
d0:26:0a:21:3f:01:36:23:2b:8e:9c:3d:3d:25:a9:
ac:c5:63:7c:58:bc:b1:04:41:64:c1:e0:0d:97:cb:
06:8b:75:b0:a0:00:81:99:bb:47:26:2f:84:b6:16:
44:78:d1:4a:33:0f:10:ae:91:34:a7:58:aa:49:af:
ea:df:6d:9d:89:82:df:7d:d1:c3:0f:04:a7:91:2a:
85:e5:f6:1e:4d:12:63:38:85:cb:df:56:45:fc:da:
42:16:76:b2:bb:a3:f5:5a:72:f8:6e:76:9b:c3:d1:
c1:23:88:6b:93:32:87:2c:ff:03:f8:36:02:9e:51:
ae:ee:07:97:e2:7a:93:a2:f8:79:29:a3:cc:86:3e:
fa:15:c1:bb:ee:6b:03:d9:b2:b2:88:95:03:1b:19:
a2:22:ca:83:f8:d9:07:23:4f:46:d7:1d:f6:fe:57:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:90:3F:C0:7A:69:C8:D1:8B:46:3B:CE:2D:C6:21:26:AC:FD:3C
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:af:7e:25:1b:31:4f:a8:26:de:50:af:47:a0:aa:f0:83:33:
dd:54:9a:0f:b6:da:9f:ac:c1:6b:85:13:29:ba:1b:bf:53:e2:
74:ae:1c:c6:d3:fc:3f:d3:e0:81:72:3f:ce:38:aa:79:23:24:
3a:ce:df:b3:ad:ac:9e:46:9f:1f:eb:b7:56:18:fb:1f:4c:33:
53:3b:e3:f6:4d:1c:be:31:74:d9:5d:23:fe:dc:57:4d:24:3a:
21:3f:8c:71:0c:65:ee:8c:7a:9b:48:b5:1e:a5:de:05:d4:31:
85:9a:4a:57:c3:33:c8:5f:3c:bb:83:9f:fa:98:d5:d4:78:2d:
f5:d9:c2:ee:62:22:40:02:8a:3b:ff:bf:34:33:58:d0:56:2b:
3b:e1:61:b2:d2:10:1e:10:b8:ce:75:b8:2e:1f:a9:12:e9:24:
8f:63:30:67:34:a7:4c:96:1b:59:e2:5e:ae:86:a4:e3:ab:a1:
dd:fd:23:e3:3c:fe:20:3b:b2:ab:4e:cf:60:1e:0b:64:3f:d5:
a2:a0:89:42:3f:46:fb:9e:bd:4c:08:bb:3f:98:ea:3a:c8:6f:
10:5c:de:ba:09:ed:ad:0f:81:78:20:bb:d3:f5:53:7b:71:18:
75:fc:51:1d:f6:07:79:3b:c5:d4:84:a6:63:fd:9b:33:05:b8:
31:f9:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:22:22 2025 by rpki-client