Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: bFVNUhTbnz8jXSAckTnCehjCjcNslcJW7ZuNkVB48eU=
Subject key identifier: 68:02:8F:E4:AE:B9:5B:B5:74:E1:61:D8:9B:79:71:BE:77:25:E7:59
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0198A04F037ED226D214C8A43AD4FA50E5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 22:03:09 +0000
Manifest this update: Tue 12 Aug 2025 22:03:09 +0000
Manifest next update: Wed 13 Aug 2025 22:03:09 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: KTDI3lJHG7nJVWkm3qiQ9HdQiANCr0mMH6SR4m4m3sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4f:03:7e:d2:26:d2:14:c8:a4:3a:d4:fa:50:e5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Aug 12 22:03:09 2025 GMT
Not After : Aug 13 22:03:09 2025 GMT
Subject: CN=68028fe4aeb95bb574e161d89b7971be7725e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:cb:9c:3a:b3:e6:19:22:73:a2:06:14:54:
b8:bc:f7:bc:07:21:56:e2:3e:d5:05:70:81:b9:71:
0a:4e:f8:11:3b:54:42:f2:34:00:9f:a0:9c:f5:18:
9e:c0:dc:6d:3a:37:9a:a0:34:59:71:c5:8b:bb:92:
9b:9d:ae:a1:e5:e5:70:7c:26:4e:dc:2a:a5:65:8b:
f0:e1:ef:39:59:6d:fe:02:ab:a1:97:dc:03:cf:b2:
07:d6:46:b5:77:d3:81:e0:ff:d4:bb:a4:e3:65:cd:
fe:80:31:f5:60:1f:a6:e7:87:6c:1f:65:19:87:40:
f3:03:a1:e8:ec:8e:65:a5:b3:47:d3:cf:ba:73:1e:
40:2d:02:92:d9:b2:70:c0:c6:6d:79:8b:aa:88:a1:
98:ea:86:17:cc:67:3e:a4:bf:48:4f:ed:11:7b:7c:
da:18:f6:91:7b:95:a5:fa:e7:39:40:0c:02:3a:0a:
14:38:09:90:8e:50:8a:a9:01:49:c2:ff:e4:97:22:
ae:6d:32:b6:e0:e3:f6:8f:bf:ae:23:43:87:f2:47:
4e:db:45:f5:81:8c:2b:e7:cb:18:90:cd:5c:d9:85:
c0:8d:4f:e0:6f:5b:b6:26:62:10:e5:55:ec:c0:fb:
fd:1a:45:a7:8d:f7:94:49:d0:dd:29:0d:be:b4:40:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:8F:E4:AE:B9:5B:B5:74:E1:61:D8:9B:79:71:BE:77:25:E7:59
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:46:7a:70:9d:c2:c5:6c:b0:ba:1a:a6:99:31:4c:f5:40:
0d:9a:59:8b:20:b1:43:54:e8:76:3a:c9:c7:6d:f5:de:da:ba:
04:da:7c:d8:b0:22:be:df:f1:50:88:94:c4:fd:3b:2c:71:0e:
0b:48:07:e9:c1:16:29:4a:4d:95:b4:46:3f:99:35:91:14:a1:
77:27:7f:a2:bc:31:c0:60:c1:aa:dd:db:df:3e:49:a4:c5:d1:
e7:49:b7:d3:7b:54:ba:a0:72:70:46:5a:1e:fb:5b:b5:85:e5:
4d:55:0e:2c:22:63:48:a4:e1:1c:55:04:86:83:fd:2b:1b:fb:
3c:9b:6f:cc:17:22:d7:f0:ae:7f:fc:92:8b:ad:bc:8c:43:9e:
0b:f7:5d:a2:58:28:68:f6:32:e9:8e:e9:05:19:67:e6:31:95:
b8:a5:32:3f:7c:1f:60:5d:e0:cd:ed:b1:9c:a9:5e:59:c8:86:
94:26:0d:0b:f1:77:0a:6c:78:c1:3c:d9:59:03:65:53:39:3a:
d2:55:f8:54:a3:58:2a:9e:f3:fc:2d:1f:d1:47:cf:e3:c6:ca:
0e:de:34:22:60:81:59:b5:36:22:b2:03:d7:6f:3b:2c:7d:1d:
07:eb:c4:01:44:a0:f6:b1:08:d5:2a:cb:71:48:d3:da:ac:0f:
5c:21:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:29 2025 by rpki-client