Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: mFkbXY+czYMwnu612rxSkdjhn1JWowvxw3ynzDeypkU=
Subject key identifier: C7:2C:39:A8:31:0E:CC:F1:19:F1:10:1B:35:9E:1B:1F:70:E7:F8:B6
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 01988C8F458319DA8183488DDFBEAFE783BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 11A7
Signing time: Sat 09 Aug 2025 02:00:56 +0000
Manifest this update: Sat 09 Aug 2025 02:00:56 +0000
Manifest next update: Sun 10 Aug 2025 02:00:56 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: aHOsvz6S1LbpcYp5PVmzksYm1m1F6AhSqvKFM4XZNwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:45:83:19:da:81:83:48:8d:df:be:af:e7:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Aug 9 02:00:56 2025 GMT
Not After : Aug 10 02:00:56 2025 GMT
Subject: CN=c72c39a8310eccf119f1101b359e1b1f70e7f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:c5:74:fc:6d:07:84:c3:57:cb:e9:0c:f2:
c1:7a:cb:53:6e:bd:ad:7d:67:69:c6:4e:7d:86:71:
c8:09:31:12:0e:53:7e:8b:ae:f4:04:e9:ff:17:ae:
97:02:a5:0d:ca:fa:ff:22:b5:e8:b0:89:35:bb:b5:
50:92:2b:09:84:6c:24:37:ce:8b:c7:d3:99:d5:bd:
de:c8:56:a3:05:47:2c:a9:9d:4d:f2:4a:63:e1:d2:
66:f9:a7:6e:f7:58:e2:b2:79:52:e5:be:96:53:60:
15:e1:32:7f:17:f6:95:75:9e:49:12:57:10:a6:bf:
96:64:a4:78:19:1e:6e:6e:8f:ba:18:94:c4:04:cf:
e9:c2:66:cc:b7:0f:84:e5:5e:cc:f2:4d:70:2f:74:
0a:3e:3c:81:d8:0f:b5:aa:e0:fb:50:76:df:a0:83:
57:c0:57:c0:47:3c:8b:89:c5:8c:30:a2:45:cc:81:
8a:cc:3c:cb:e9:f6:df:8a:3d:c8:de:7f:c2:e5:e6:
85:76:29:4a:e0:64:14:a1:77:d2:ee:7a:be:48:4a:
fa:be:68:83:dd:36:20:1a:a7:27:71:70:9e:ee:86:
43:7c:37:c2:ab:09:a8:e6:d2:de:9a:08:05:c9:86:
09:f0:e9:95:ed:5b:33:92:2c:1d:6c:2e:39:fa:88:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:39:A8:31:0E:CC:F1:19:F1:10:1B:35:9E:1B:1F:70:E7:F8:B6
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:94:a4:85:98:01:ea:cb:ee:b3:df:3d:64:5f:0f:1e:86:
da:92:ab:36:16:94:6d:85:cc:85:cb:e7:75:91:b7:e7:87:d3:
e8:66:d7:42:2d:c5:c5:35:68:11:9d:05:e8:34:58:d2:af:fb:
3c:4c:31:af:7e:17:3c:86:91:59:29:ba:fb:b9:5a:7a:73:41:
f3:d6:b6:13:bb:e6:f8:94:e5:3a:39:54:cf:04:9d:8b:94:c1:
e2:66:94:84:69:37:05:d8:29:6c:0f:0c:9d:d5:15:e6:35:19:
22:3c:62:35:4b:13:0d:5e:53:ae:36:e8:f8:67:9a:f3:17:b9:
15:60:72:64:f4:90:1f:92:a3:74:59:cf:3c:a2:ee:70:a0:df:
64:53:be:92:5a:af:62:82:e1:58:56:0e:d6:ea:70:f4:23:03:
ac:74:bc:e8:24:80:54:8c:45:72:54:17:fe:f3:ea:11:99:9c:
89:cb:cc:86:25:ff:2b:e1:7a:af:b5:a1:f7:63:be:de:b7:d4:
de:a3:b9:97:89:9b:3a:68:7f:b7:5f:74:3f:bb:14:63:6f:d5:
4f:fc:b6:64:4b:7d:d0:a3:78:93:c9:89:cd:01:2f:64:30:da:
98:73:e4:1e:cd:0d:5a:ed:0e:de:a9:1f:e4:22:5c:da:7f:94:
f1:d8:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:54 2025 by rpki-client