Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: 8Lelo6Nz+rg/VJcOUk+2zGwdsNClTeQuekSqDTrjZq4=
Subject key identifier: D3:22:A3:C7:5E:C0:38:56:16:06:60:83:19:F5:7D:B2:B5:AA:89:BC
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 01988EED3978E59287EBD59E2D92119063EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 1278
Signing time: Sat 09 Aug 2025 13:02:48 +0000
Manifest this update: Sat 09 Aug 2025 13:02:48 +0000
Manifest next update: Sun 10 Aug 2025 13:02:48 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: E0Mck/CC0nkVEYrMBOzlANGSDHCJY8aL0lsmnGGr+j4=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:39:78:e5:92:87:eb:d5:9e:2d:92:11:90:63:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Aug 9 13:02:48 2025 GMT
Not After : Aug 10 13:02:48 2025 GMT
Subject: CN=d322a3c75ec038561606608319f57db2b5aa89bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:a2:09:4c:68:6e:d9:2f:16:64:fe:4f:2f:
37:7b:2a:5a:5d:72:39:a1:b8:4f:18:95:17:b4:69:
d7:b6:58:c9:ef:23:53:84:a6:ba:7e:a2:e6:e4:b1:
08:a7:a0:55:29:9f:85:cc:fd:ed:31:94:c4:b4:ed:
2c:23:ca:8e:43:7d:9d:29:b3:66:1d:5b:d7:ea:e7:
b6:a4:2b:e1:5b:15:bd:87:d9:32:b0:e8:bf:b1:26:
ee:ea:c7:4b:a2:4e:1c:06:e6:11:0c:38:64:57:0f:
6e:2f:21:8e:c1:05:35:0b:b6:6b:47:81:5e:a5:64:
9b:b1:bf:16:08:95:c2:40:ce:f2:e6:72:39:68:ca:
d4:90:18:69:33:ca:88:b6:1c:a9:31:2d:76:84:fb:
17:c6:8f:4b:06:59:0b:b2:bd:6e:d4:3d:1b:e3:72:
29:4f:bb:c7:34:3d:fb:89:11:74:d3:4a:b4:9a:4f:
9f:c1:d1:de:81:8d:39:2e:1f:c4:26:55:3c:a8:36:
5d:25:a8:cb:92:2d:99:80:86:90:18:1d:4a:46:6c:
a3:ba:14:a8:f7:d3:26:0b:2d:fd:48:4f:ec:bc:2a:
7f:27:fb:c6:e3:3e:7c:fb:f3:76:08:6e:32:fd:46:
ae:92:da:cb:65:5d:f2:b2:29:c0:42:31:e6:97:b0:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:A3:C7:5E:C0:38:56:16:06:60:83:19:F5:7D:B2:B5:AA:89:BC
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:36:12:a6:ba:ce:70:68:fa:67:32:bc:dc:5e:78:74:09:
5f:9b:ce:e3:86:25:51:22:0b:22:08:75:34:9b:42:41:f7:de:
61:3c:76:90:4b:8f:0b:8f:78:37:db:bf:e1:aa:4b:1b:45:be:
0c:a8:bf:74:7d:7b:0a:04:d0:8b:8c:4c:2a:98:37:39:8c:21:
15:0e:ee:cb:b3:7b:1e:e9:a0:ca:b8:36:9c:0a:5d:1c:fe:52:
da:75:1e:cf:4d:df:61:a8:f9:48:bc:1a:f7:3d:31:74:74:01:
92:f2:05:00:a9:98:b3:2a:30:0b:7f:36:8d:2d:3e:bb:f1:eb:
db:a8:59:77:ac:1e:c5:25:66:a0:83:3b:53:dd:8f:04:e6:85:
b7:6f:d7:ab:9e:bc:04:57:11:84:dc:da:b0:13:28:62:c0:de:
af:d0:cc:e6:99:2b:15:02:56:f7:a4:20:81:de:36:e1:38:9e:
19:de:8e:33:20:a2:1e:d5:35:2a:0b:4b:e2:c1:43:61:0a:61:
f2:54:3b:3d:e8:3a:af:8c:c6:ee:7e:51:5d:5b:58:19:75:7c:
c2:a8:ee:74:4f:ae:a6:b4:cb:08:1c:1d:ca:fc:a2:d9:a0:e5:
82:13:3c:32:81:a0:94:da:ad:81:b4:db:94:47:48:63:06:c9:
d5:99:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:49 2025 by rpki-client