Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: IE+bVEneXeE2vCDCdVpQK4HjGLGAWyHNKKdRMIyg/fo=
Subject key identifier: 82:E3:6C:6E:C5:3F:F4:F6:4F:7A:61:02:B5:92:35:81:5C:87:F1:2C
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 01987D1CA8778898A6FDFDA85437B97A0732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 05FE
Signing time: Wed 06 Aug 2025 02:01:26 +0000
Manifest this update: Wed 06 Aug 2025 02:01:26 +0000
Manifest next update: Thu 07 Aug 2025 02:01:26 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: JOeYqfk4wVHT2Ftrbzxe1/nxRd7b8WZKWo2STzQcHGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:a8:77:88:98:a6:fd:fd:a8:54:37:b9:7a:07:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Aug 6 02:01:26 2025 GMT
Not After : Aug 7 02:01:26 2025 GMT
Subject: CN=82e36c6ec53ff4f64f7a6102b59235815c87f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:7d:7b:ac:2b:62:4f:14:ec:89:08:53:5e:
2b:2c:2a:8f:7d:4c:b5:f4:dc:a0:d2:79:bc:7d:f3:
94:36:7f:7f:0c:42:16:46:10:09:25:de:c3:34:ed:
ef:71:c4:b6:1e:b3:12:ad:b8:9f:1e:4d:8e:15:a2:
43:29:11:12:a6:dd:51:34:b6:26:fd:2a:30:24:d2:
41:85:ef:5f:ea:7a:59:56:54:22:6b:4d:4f:42:03:
91:1d:c2:de:62:0c:54:4f:f8:99:54:a3:e5:1c:93:
27:9b:f4:1f:25:01:5a:fa:1a:6b:4d:e0:f9:26:33:
2b:f0:6f:fd:bc:d4:2b:eb:af:da:d6:ea:75:77:2b:
03:d7:4e:27:95:87:3f:15:74:91:1a:4d:84:ec:89:
4f:04:f5:53:f9:41:a3:f5:83:b7:eb:d0:8c:4a:b0:
96:50:a8:11:bb:5a:b3:15:d6:82:da:6a:e0:e2:02:
84:6d:ba:46:5d:54:0b:8c:0f:b4:24:6b:b6:9c:60:
2a:4b:d9:1b:a6:da:d2:aa:1a:87:b4:56:ff:d5:08:
81:e3:5d:16:fe:23:02:2f:4c:b4:21:e0:ed:98:4b:
e2:68:09:96:47:6b:8a:22:35:be:c8:4d:21:ab:a8:
38:54:4e:a2:e3:49:83:2c:89:24:6b:54:e1:e0:51:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E3:6C:6E:C5:3F:F4:F6:4F:7A:61:02:B5:92:35:81:5C:87:F1:2C
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:05:08:42:d0:50:c5:29:96:27:99:8e:07:04:43:3a:73:
1e:96:ec:1f:9d:1d:46:27:c3:74:9e:55:e0:20:c4:ed:15:e7:
c1:51:d7:ef:5c:74:9a:64:de:f8:77:35:4d:52:17:bb:75:c2:
1c:06:24:71:ba:39:5a:84:7a:02:ec:b5:51:d2:3c:6d:e0:3a:
c1:f5:47:d9:96:cd:5a:67:2e:9f:4f:33:c7:fd:36:b8:f8:e8:
21:40:1e:79:4b:9c:f5:c0:b2:02:df:e9:9f:6a:14:8e:bc:11:
a7:d9:a3:9c:2a:da:a7:a4:e5:b6:2f:32:cb:22:0c:40:6b:3a:
97:7b:8d:b6:81:6b:29:78:92:c6:f7:1f:62:a6:16:18:0b:ab:
4f:6a:c7:11:4c:bd:86:cd:66:51:b8:5f:ac:42:fc:19:95:98:
a4:3e:d9:fe:5b:0e:fc:af:bf:8f:fc:e2:ca:05:86:44:51:8f:
38:87:6f:2b:40:73:fc:2a:16:22:7c:40:5d:e5:b2:34:26:b7:
8b:73:b3:dd:f7:12:7b:67:c6:e0:09:ea:1a:33:bd:ed:c9:b1:
a3:27:80:1c:90:b4:15:4e:83:01:a2:44:c3:86:59:3d:f1:d6:
f2:69:68:fb:14:7c:96:c7:31:0f:89:45:9d:d9:8c:66:0f:21:
b0:8e:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:43 2025 by rpki-client