Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: xugId7xikBNBefufq0G/qdsmmjRAjtNaOFuSplVbOJ8=
Subject key identifier: B4:0D:48:D5:04:6E:F3:BF:A8:EB:2A:BD:27:3C:A7:F7:86:12:5D:64
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 01987B9D56AA106986197077F0E147ADC411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 19:02:45 +0000
Manifest this update: Tue 05 Aug 2025 19:02:45 +0000
Manifest next update: Wed 06 Aug 2025 19:02:45 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: 7hAOjhOf1J1K8jriIRXT9Rs3oQ/x8kRsQmN3ebsp+xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:56:aa:10:69:86:19:70:77:f0:e1:47:ad:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Aug 5 19:02:45 2025 GMT
Not After : Aug 6 19:02:45 2025 GMT
Subject: CN=b40d48d5046ef3bfa8eb2abd273ca7f786125d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:c6:50:c5:de:5c:44:1a:35:bd:b2:73:fd:
b3:f8:d1:46:1f:dd:a1:0b:4a:41:ac:ae:7f:60:d9:
65:ad:f3:2b:18:ec:e4:f9:be:40:27:5b:d5:df:99:
98:37:37:29:36:20:c7:33:94:c5:e8:e2:63:65:f6:
eb:4a:91:26:62:06:28:c8:c9:a3:8a:df:ed:2c:0a:
26:99:0f:81:33:fe:69:c6:84:92:48:21:78:2e:2a:
02:39:a8:1b:d2:87:0a:b0:45:b8:47:6b:ba:54:94:
94:99:93:4f:3c:37:83:b9:23:bb:d4:7f:8f:49:ff:
f1:36:67:2f:33:1f:0a:97:fb:85:2e:e9:3a:19:81:
60:7a:66:99:0a:8c:31:af:16:d8:ae:24:ae:11:a1:
f1:c9:92:f8:12:89:1b:fe:38:d1:10:0b:68:d3:43:
75:9a:d4:68:09:7a:c9:59:4a:fe:54:d4:d2:27:70:
ae:48:d4:c4:6c:0a:ab:4e:1d:d4:fd:7b:7e:8b:33:
32:a8:e0:9e:e2:23:f8:87:0c:26:0b:35:13:09:e9:
58:c2:75:2a:d2:11:23:5d:77:17:6d:58:3b:91:6b:
59:fb:24:62:ee:fd:6a:0c:8a:cd:ef:e4:aa:11:50:
08:2e:39:be:20:ff:c1:54:86:1e:73:3a:de:48:20:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:48:D5:04:6E:F3:BF:A8:EB:2A:BD:27:3C:A7:F7:86:12:5D:64
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9e:49:64:9d:97:11:60:28:14:3a:ab:36:37:76:d4:56:11:
56:21:dd:15:d0:49:c4:ff:e1:c9:80:8d:c1:da:04:02:e9:cc:
97:e4:42:b9:9f:c1:37:b5:34:2e:f2:b3:42:bb:c1:bf:bf:bd:
24:3d:15:d9:6f:b2:e2:2b:db:cb:1f:31:55:12:fd:1f:96:8d:
68:87:2d:0f:23:8b:21:aa:d4:b1:d0:0c:e0:9f:bc:e5:82:d9:
df:e0:8c:fb:c6:67:dd:89:1f:d4:e9:9c:9d:5b:c4:ad:5a:cb:
df:62:19:8d:ca:46:ac:27:83:f6:99:34:a3:c5:fc:41:f9:ed:
78:d4:fa:98:1f:2b:65:e1:88:80:4d:55:83:44:ab:c9:5d:63:
8b:49:e6:dc:c1:a7:32:c8:b1:fe:89:6c:a7:12:f3:4a:9b:59:
ed:64:c6:ab:5e:d0:e0:ad:dd:db:55:b6:5f:ba:09:0e:b0:fe:
a0:1d:38:fa:9f:ed:85:39:72:6b:62:e8:fb:a8:cb:c9:5d:67:
21:bd:75:d5:c3:a5:a8:ab:e9:49:bb:13:b8:2e:b9:b7:78:e8:
fc:b0:88:05:ff:72:86:e4:e9:cb:55:78:24:9c:62:a6:4f:eb:
c0:a1:c9:a6:ef:f6:f9:d9:ba:7b:98:9a:8b:a8:a6:6c:14:c2:
33:65:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:39 2025 by rpki-client