Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: ty7kyFSUinvM6IwO0glgbT4Rj4BrpUMxHcEPwXtv7ZM=
Subject key identifier: 0E:83:17:72:91:F9:A5:2B:B0:D0:69:0A:87:1E:E5:3A:E8:E8:B4:52
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 01988168C5FD518DA030E68EF93D5430B3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0C38
Signing time: Wed 06 Aug 2025 22:03:03 +0000
Manifest this update: Wed 06 Aug 2025 22:03:03 +0000
Manifest next update: Thu 07 Aug 2025 22:03:03 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: 7wDwnLkkXfX3Ga0QcYCEi0maX4IiuyZLsp4sHOXflWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:c5:fd:51:8d:a0:30:e6:8e:f9:3d:54:30:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Aug 6 22:03:03 2025 GMT
Not After : Aug 7 22:03:03 2025 GMT
Subject: CN=0e83177291f9a52bb0d0690a871ee53ae8e8b452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1e:31:06:99:84:f1:1f:de:2b:b0:c8:5c:68:
a7:13:4d:91:65:84:1a:96:58:cc:21:e4:58:af:db:
29:57:ea:f2:63:1a:f9:0b:49:c3:2f:7f:f7:47:a3:
38:0c:64:5b:79:e2:bf:92:3a:a5:b5:66:9e:52:62:
b0:50:89:fe:34:17:ea:35:48:70:1f:a0:9d:37:af:
bf:31:10:3b:a7:0f:42:89:ad:39:42:b1:db:ac:db:
c9:85:bf:9c:a5:1c:6b:f8:02:07:11:0e:98:b9:70:
ba:10:79:1e:87:48:1b:8f:fc:42:45:df:78:f2:ab:
ab:83:ea:69:c8:28:81:bb:77:27:49:3e:01:7b:24:
c2:d5:67:39:1b:20:0b:69:65:ed:77:88:3a:aa:a9:
bc:cc:81:3e:e7:e1:6e:ff:14:bb:c2:d5:4d:57:5c:
47:9c:55:7a:91:40:26:7e:95:be:57:b0:18:2c:ee:
5b:57:fd:75:be:56:e3:a5:72:7b:76:46:0d:d7:8b:
fc:34:6f:6d:ed:2c:f8:53:25:db:cc:ae:7b:76:ed:
47:7c:0b:42:71:98:6d:10:19:e6:41:11:60:3f:a5:
53:8f:d9:e6:0d:39:2d:4a:0e:bb:b1:91:c4:49:d2:
cb:1d:4e:b7:8c:ba:4e:ef:b3:70:b1:2f:d6:eb:87:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:17:72:91:F9:A5:2B:B0:D0:69:0A:87:1E:E5:3A:E8:E8:B4:52
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:35:42:43:3c:51:38:72:73:13:a1:58:af:94:af:72:0f:11:
6d:4d:a6:bb:bd:32:1d:cd:88:ae:79:51:46:ea:99:fa:cf:1b:
48:14:f4:f8:0f:a8:dc:0d:ca:ae:32:ae:9f:2f:79:57:c8:4e:
07:b2:0f:35:ae:ec:ac:ef:e8:10:cd:0b:64:74:62:8e:85:da:
c8:43:58:95:8f:5a:9f:dd:63:7b:cf:bc:14:4c:2d:ba:b4:b7:
ae:89:ab:34:b4:70:8c:8f:95:84:b5:63:76:67:7f:b6:30:10:
2e:ca:85:53:e0:4e:cf:d4:41:f3:fe:52:ef:dc:8b:18:3a:d0:
3d:b5:ae:d7:61:b1:27:39:4f:3a:8f:9d:48:6e:27:b9:9a:0a:
01:2f:46:b9:0b:d0:d1:69:1c:1d:71:08:fc:1c:3d:21:a8:66:
b3:69:54:e8:60:02:fa:9e:4a:85:2a:16:6d:40:9b:93:0f:af:
ec:9a:a4:49:59:63:9b:2d:ca:77:f2:53:75:68:69:ff:5d:54:
dc:4f:b0:75:0b:b4:5e:74:cd:0d:e9:d6:c9:08:59:a1:a5:d0:
70:36:79:1a:88:14:c6:87:b7:15:bf:1c:33:4e:40:e9:b4:81:
7d:5a:b6:c9:1f:96:10:09:8e:85:a7:98:1e:44:de:94:d0:dc:
f0:4f:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:33 2025 by rpki-client