Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: 0VJXAxQ6EQQ3GLzI3aYstnMK6+K35usqb/dynwMDlkY=
Subject key identifier: 65:A7:1E:78:44:3A:98:C2:AD:33:1E:76:16:60:B5:C7:5B:F2:B0:2D
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 0198733DB1BC239F99310EB1E3190004D532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 04:01:19 +0000
Manifest this update: Mon 04 Aug 2025 04:01:19 +0000
Manifest next update: Tue 05 Aug 2025 04:01:19 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: RrPNh+CCYSieqPhXeTGXS/Cr+pkzHwKUyLCaRO7kfWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:b1:bc:23:9f:99:31:0e:b1:e3:19:00:04:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Aug 4 04:01:19 2025 GMT
Not After : Aug 5 04:01:19 2025 GMT
Subject: CN=65a71e78443a98c2ad331e761660b5c75bf2b02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:ba:46:5b:1c:b2:f0:dd:72:b8:4b:d4:f6:
73:58:09:96:4a:ca:4e:99:c8:96:98:95:8a:5d:10:
fb:77:91:9f:86:d6:c7:a5:9a:ae:c1:31:f9:63:e2:
96:92:0b:6a:05:0e:aa:85:20:5b:89:f3:55:74:2d:
04:07:9d:ac:b9:39:a4:24:23:53:18:58:23:78:8a:
2b:10:a7:a3:e0:30:5e:65:88:dc:5f:d4:42:28:cf:
e1:fb:27:17:44:62:f0:85:3a:85:8e:8e:bd:34:89:
30:c9:86:c8:83:c3:3b:e9:fe:23:3c:e7:4a:0e:85:
d5:93:66:35:c8:f4:85:6d:f1:93:69:4f:7b:98:27:
7c:b3:ee:3c:2b:35:de:c3:42:00:33:31:f1:91:d6:
eb:da:59:34:75:03:86:7a:b2:4b:5e:6b:c5:ed:28:
1e:8e:4e:1c:18:af:05:95:d2:e4:31:68:b2:a2:22:
cc:95:d4:60:90:c5:87:23:4f:f8:4d:9a:d8:03:d0:
e7:44:1e:85:7b:b9:98:35:fc:79:65:c7:d8:1a:d7:
65:30:0c:5b:63:bd:50:b4:3f:42:aa:bf:98:5d:f0:
f7:36:89:61:38:1d:79:43:9e:82:37:ec:4f:9b:3d:
96:1d:99:0b:5a:ef:14:c2:66:06:05:26:f1:b1:a5:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:1E:78:44:3A:98:C2:AD:33:1E:76:16:60:B5:C7:5B:F2:B0:2D
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e7:82:91:19:3b:f7:df:10:ce:a7:c6:a8:d4:d2:83:17:ea:
30:80:5f:63:0b:25:1f:c8:62:47:45:e3:34:f4:91:88:69:f4:
d7:12:3a:89:4e:83:eb:a7:89:f6:22:59:2e:ef:cd:df:3d:b5:
37:db:06:d3:b1:4e:ba:be:40:dc:30:21:9a:b2:8c:8b:39:f6:
f4:29:0f:28:23:68:14:ab:96:32:67:e8:c5:c0:b0:a7:fe:92:
39:0a:27:46:c2:90:bc:31:63:54:7c:0d:0e:b3:54:80:69:07:
bf:41:ea:7f:37:71:fb:fc:ea:4a:c8:54:cc:90:79:3b:76:05:
0a:b2:1d:ec:a2:b8:70:fd:e4:d9:9d:2d:50:9d:c7:ac:d4:85:
16:3d:45:38:d2:af:c5:f9:0d:83:03:ca:49:df:9f:a5:c8:52:
63:2e:4b:4d:32:6f:ca:fb:d2:58:d8:86:82:e7:19:04:ca:55:
29:bf:bb:52:9a:da:30:9c:fd:fa:5f:60:7b:bc:3a:e2:a0:65:
70:b1:4a:00:0f:91:33:b1:f7:65:31:5e:90:4b:36:9d:bf:7b:
7e:7d:fa:75:d2:5d:e4:84:bf:08:92:f6:cf:2e:e8:64:a6:63:
30:24:75:78:42:3a:c3:08:a7:e8:91:a5:e4:6f:a7:e9:ff:8c:
39:08:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:28 2025 by rpki-client