Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: d0dlc7LG1SBDvQj1cfAAXEF23V/+r4kzPxdflHagNso=
Subject key identifier: 7F:E0:3E:25:C3:4B:8A:28:DE:D2:C4:2A:C6:C5:5D:4A:43:67:D8:36
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019896A5984DEA8FB51E7200E9C9CC38AF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 12E9
Signing time: Mon 11 Aug 2025 01:01:31 +0000
Manifest this update: Mon 11 Aug 2025 01:01:31 +0000
Manifest next update: Tue 12 Aug 2025 01:01:31 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: U5sCXx9N4OfG14Mj+azqk5HmKE99ioHx/XCn7hbLa+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:98:4d:ea:8f:b5:1e:72:00:e9:c9:cc:38:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Aug 11 01:01:31 2025 GMT
Not After : Aug 12 01:01:31 2025 GMT
Subject: CN=7fe03e25c34b8a28ded2c42ac6c55d4a4367d836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:19:f0:a1:70:21:87:d9:c1:a4:d4:1c:45:
17:d6:ed:79:08:8d:98:72:c0:19:57:43:79:5c:e2:
be:6d:2e:6f:0d:62:ac:37:d7:8f:6f:eb:7c:15:a1:
1a:20:d7:2e:a1:4c:f8:06:40:d7:e1:00:0d:c5:58:
fe:c2:d8:0f:bf:3c:df:e6:67:1f:49:ae:96:b2:87:
f1:67:59:28:56:89:aa:7c:a1:94:ed:0d:02:e2:5b:
23:ea:3e:37:6f:94:78:4a:95:b4:43:61:f8:0f:35:
f2:19:be:b6:42:dc:09:f2:40:5f:37:fe:eb:e0:76:
a0:c5:51:82:65:f1:f3:69:ab:51:24:d4:51:b6:5e:
00:78:ec:1e:fb:34:7e:87:f9:1d:a4:b7:44:62:69:
79:cb:56:37:fa:95:32:07:e8:e1:e5:03:5b:d5:9d:
94:8c:d4:2e:2e:56:e5:0e:15:5d:e5:86:5f:21:90:
8c:a3:87:e9:19:d5:4b:3a:64:e5:c0:2a:de:1a:2e:
6f:6b:af:51:37:1c:a1:fd:30:fc:fa:cb:1a:80:3e:
73:3a:14:98:47:96:bc:8e:79:06:0f:ca:3e:58:fd:
68:71:d0:c8:a1:c7:c2:ee:10:08:45:23:c4:bc:13:
1a:80:e3:09:e4:27:ae:63:d2:89:93:ef:1b:3a:20:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:3E:25:C3:4B:8A:28:DE:D2:C4:2A:C6:C5:5D:4A:43:67:D8:36
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b8:a9:22:cc:70:ff:cc:16:c1:b9:12:7c:6e:53:7d:8b:c3:
70:d5:f8:2d:e8:8e:28:3b:57:c9:e5:ca:fd:7a:eb:47:45:b4:
74:c5:e3:3c:9e:ef:f6:c3:a3:26:f8:2b:6d:4f:d6:14:3f:88:
69:e6:72:ff:67:84:2a:33:1b:a1:6a:15:de:ab:49:bc:f8:c4:
9f:9e:bf:64:80:f1:f0:09:51:ac:5b:8b:10:e3:56:44:2b:c7:
2a:d7:c8:27:ed:60:84:35:55:ef:04:50:c7:99:7e:60:f2:11:
d9:44:59:e4:f8:2d:8a:43:89:22:87:bf:3c:65:42:27:7f:2c:
25:1f:28:59:af:bc:29:d6:ee:67:84:9f:3e:39:e6:0e:33:8a:
8c:d9:ab:33:30:5c:82:07:55:76:f8:9c:6e:3c:22:28:c0:18:
fe:96:bf:6f:e0:7a:90:50:38:5e:ed:8c:19:36:a4:ca:94:ed:
d0:1d:4a:28:98:8f:98:37:85:ac:ef:77:65:28:a6:c5:ba:c9:
c5:a1:59:b9:0f:a2:35:2b:80:ef:0d:cb:e2:08:90:0c:ca:11:
27:99:33:4d:66:16:58:fe:60:ef:d7:a9:cf:26:c7:e0:d1:0f:
48:43:6c:aa:30:f6:bb:17:f0:44:5f:5c:c7:0f:91:1f:22:e9:
cf:10:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:46 2025 by rpki-client