Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: nZHUyXnq3RonoXnEYPKh6O+VRBbQcSSAf7lSeqJcFEU=
Subject key identifier: 57:34:4A:FD:E4:1D:F8:21:AC:0C:57:0D:8A:B8:D9:B8:A2:4D:0B:61
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 01987D1C7985EA266CA57679D954F6D339F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0685
Signing time: Wed 06 Aug 2025 02:01:14 +0000
Manifest this update: Wed 06 Aug 2025 02:01:14 +0000
Manifest next update: Thu 07 Aug 2025 02:01:14 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: nblpQuYAvZ+03GoILPxC4uwsoK/HmjvAdmJvmDUnQWk=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:79:85:ea:26:6c:a5:76:79:d9:54:f6:d3:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Aug 6 02:01:14 2025 GMT
Not After : Aug 7 02:01:14 2025 GMT
Subject: CN=57344afde41df821ac0c570d8ab8d9b8a24d0b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:3f:98:3f:df:b2:10:de:c3:f0:1e:f3:eb:
b8:b6:ec:84:37:0d:5a:48:36:53:21:ed:19:1b:e2:
ab:ee:ef:83:77:f1:b1:61:28:f2:d0:2b:7d:75:46:
c9:0d:2c:a3:c2:51:bf:da:18:7e:b6:04:bd:fa:fe:
3f:07:cc:17:6d:ce:25:5a:90:1e:18:12:b3:b2:1a:
3c:54:8e:d5:b4:8b:98:22:8d:aa:b9:56:3e:27:ca:
a4:7d:b5:0a:d8:db:07:40:9d:b7:54:1d:e6:7f:89:
84:65:9c:69:42:a8:76:d0:cd:00:fe:f6:85:b3:7c:
91:f5:b8:7f:2c:db:8b:bd:20:ca:81:43:99:f1:16:
f1:99:ee:07:1e:d6:54:8c:08:95:d2:1d:f6:28:b2:
a5:8d:ed:aa:45:b9:05:59:68:7a:71:fe:8f:05:2f:
41:ad:df:f9:32:9c:29:cb:5f:ed:e7:ef:0a:93:1d:
c4:3a:62:4d:14:c2:59:b6:d2:a2:6c:77:b4:14:6a:
94:56:ca:0f:c3:96:f2:75:84:a2:7f:e9:03:4b:a8:
8c:bf:d6:9f:be:80:c0:cf:73:c6:7f:62:70:81:6e:
ae:0c:80:b2:ef:b9:59:c0:f3:ec:f4:7c:bf:7a:9c:
5c:6e:be:d5:cf:75:c7:15:75:dd:f4:ea:a2:07:cd:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:4A:FD:E4:1D:F8:21:AC:0C:57:0D:8A:B8:D9:B8:A2:4D:0B:61
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:cb:80:dd:f7:9d:c7:ce:b0:c5:3d:3f:ca:32:ef:2e:23:
12:2f:c0:6b:08:0b:4a:1c:cd:cc:e0:41:48:39:23:42:bf:76:
e0:6d:c3:05:fd:9a:9c:f5:64:30:91:6f:42:3b:22:2f:a2:89:
28:e0:1a:8a:db:2a:2a:19:df:8a:df:b1:cc:86:8a:7a:cc:c1:
46:1a:34:44:1f:97:0c:86:b3:07:ae:60:a0:03:11:d9:c7:c3:
de:70:70:65:e8:33:22:fc:6d:ea:3e:fb:49:67:a4:ee:26:37:
78:ee:e0:ad:9d:ca:88:59:14:8f:33:70:e2:87:0b:39:90:80:
b8:a4:09:93:b9:e3:12:55:62:96:b4:e6:0e:42:8c:81:06:9e:
db:b0:7b:5c:53:0a:f3:1e:0b:54:d2:2f:6e:7f:2c:79:33:a5:
59:0a:f0:dc:92:1b:9e:34:2e:ee:87:91:5d:d9:68:ca:fb:2f:
d8:28:d3:9d:c8:eb:b1:03:0a:e4:9d:85:47:66:ae:5a:e5:ac:
e0:ca:b0:92:d5:6e:cc:0a:3d:0b:39:6a:27:a9:fe:50:34:38:
14:6e:d8:c7:f4:82:55:11:25:67:94:33:56:52:be:b4:38:00:
97:b4:b4:9b:83:20:67:74:c9:14:92:0f:01:a5:56:37:b5:af:
ae:77:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:28 2025 by rpki-client