Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: 3A/MJIrYK6asRD074uVf8WIrF9HMgxCa5A+NSOGc8C0=
Subject key identifier: 69:16:EC:EF:DA:BA:8E:FB:75:3A:30:24:89:49:DD:50:1B:B1:97:35
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 0198843190CCEE54A726FF086AF19C23B6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 10E2
Signing time: Thu 07 Aug 2025 11:01:37 +0000
Manifest this update: Thu 07 Aug 2025 11:01:37 +0000
Manifest next update: Fri 08 Aug 2025 11:01:37 +0000
Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: s1V09Mzth61HtVIz/97hFvHsvgLw0WCYu5S46m2rZTo=)
2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:90:cc:ee:54:a7:26:ff:08:6a:f1:9c:23:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Aug 7 11:01:37 2025 GMT
Not After : Aug 8 11:01:37 2025 GMT
Subject: CN=6916ecefdaba8efb753a30248949dd501bb19735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:85:21:04:35:0b:b2:d3:16:e2:d2:61:2a:
13:4d:e2:af:fd:58:1b:f7:86:45:58:69:a2:12:d0:
f0:95:e1:c4:4e:9d:14:d2:04:97:e3:4b:97:7d:b8:
a5:68:aa:89:34:b1:e1:ad:e1:f4:06:b7:65:a4:83:
8d:56:a7:49:3b:65:ed:d7:5d:6a:c2:4b:99:55:72:
8c:8c:7a:f8:1e:23:c5:38:43:31:8d:6e:79:e5:5d:
81:b2:94:bc:34:13:64:ed:f0:58:79:e5:20:a7:e7:
a4:f9:71:c4:23:15:ee:fe:b6:e7:2e:13:07:23:3f:
cc:4b:81:ca:2b:50:25:91:3c:c0:42:1d:3f:bb:31:
d2:a7:4a:cd:bb:f5:ab:1f:30:b4:4f:ab:b6:aa:3f:
e8:74:62:b8:9f:1c:70:7d:2d:00:e6:13:af:a1:13:
fd:cc:c7:93:06:cc:45:a2:ec:40:64:94:ec:30:45:
cb:70:69:c1:81:c2:44:f3:21:f1:d0:75:21:b2:9e:
3c:38:b2:94:f9:3d:1d:ed:0e:f3:a6:46:52:39:dc:
48:89:ae:96:64:2f:55:5b:2e:0e:55:84:44:da:34:
6f:96:de:2a:ae:7a:cc:74:d1:b8:ca:6f:9f:47:f1:
54:b1:2c:5e:7f:2d:17:b8:8e:70:24:99:2a:db:0b:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:EC:EF:DA:BA:8E:FB:75:3A:30:24:89:49:DD:50:1B:B1:97:35
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:23:33:e2:7e:0f:d3:0c:21:35:d8:e5:70:69:44:1b:2b:
bc:65:54:6d:78:3d:70:cd:fb:36:7e:54:a8:f4:36:93:0d:93:
14:19:b9:1f:b4:f0:bb:d4:f7:0f:73:f3:7e:92:a7:28:53:ab:
c6:06:9f:14:6a:35:5f:78:b5:b7:cd:67:73:4d:58:a4:55:11:
ed:85:eb:6d:0f:7b:45:f4:7b:33:12:94:82:fe:5d:01:c6:f9:
6a:18:35:c0:ff:81:22:6d:02:e9:d6:be:3d:67:84:d2:46:72:
02:86:85:29:2e:a2:56:4e:ab:c5:d8:60:e9:01:52:26:18:20:
3e:3e:80:fe:7e:7f:26:3d:03:aa:f7:1f:c7:18:dd:8a:77:75:
1e:a3:e4:af:13:e2:db:5a:33:0d:a9:e0:1d:4a:36:d7:f4:d5:
59:5f:d7:4e:3f:cf:f5:eb:90:35:67:ce:6b:28:80:0f:3a:c0:
8d:cd:1c:13:be:87:ba:04:f2:13:78:4a:0a:ac:1a:56:81:72:
25:56:f9:81:fd:7d:82:06:4b:14:52:32:ce:65:ff:93:ac:16:
11:fd:21:66:5e:19:ba:f6:e1:5d:d8:6e:ae:61:f1:e4:41:d8:
62:92:b5:2c:16:a0:29:32:35:bb:0f:f5:5a:73:4a:b5:e7:20:
68:51:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:12 2025 by rpki-client