Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: bAqRZv8axx4dD/V2rkfKLZjvtpUCtA1mF46fcEkzw2U=
Subject key identifier: 10:F0:E6:64:DD:08:EA:2D:40:B8:CE:62:BC:13:59:C0:F4:55:F0:5A
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 019873E1E23F8DF76C603F0F4D805815D0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0E0B
Signing time: Mon 04 Aug 2025 07:00:39 +0000
Manifest this update: Mon 04 Aug 2025 07:00:39 +0000
Manifest next update: Tue 05 Aug 2025 07:00:39 +0000
Files and hashes: 1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: 5kOomlDYf2g9/4URBLxolq1eIRrcqYxsf+fZhUNd5nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e2:3f:8d:f7:6c:60:3f:0f:4d:80:58:15:d0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Aug 4 07:00:39 2025 GMT
Not After : Aug 5 07:00:39 2025 GMT
Subject: CN=10f0e664dd08ea2d40b8ce62bc1359c0f455f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:ce:a1:71:b9:48:41:a2:93:01:91:48:76:
a3:85:4a:99:58:d6:16:b7:14:d6:eb:0f:e4:b2:00:
8c:4c:01:a7:e8:a2:89:38:53:14:6c:ac:72:1b:26:
98:b0:c5:90:d8:db:87:e2:61:ae:6e:75:b8:05:55:
d0:7e:c9:41:d2:76:42:71:90:ba:85:9c:85:1a:26:
e5:7d:b1:30:d0:73:3a:c0:26:36:c7:84:e5:76:40:
51:9c:24:af:88:f8:9a:fb:14:1a:dc:98:8c:5d:e9:
b2:47:ac:b6:34:b4:3d:1c:36:b0:d2:db:81:e5:cd:
e6:16:9c:49:c8:95:24:99:fc:82:17:c5:64:5e:5b:
83:2f:db:be:0d:16:64:ec:69:fe:8a:6f:fb:b2:7c:
71:50:42:e7:a5:1f:92:e8:71:96:ef:df:8d:52:4a:
ec:86:61:67:8b:43:5b:76:0b:b6:db:8b:50:d9:67:
2c:85:ce:75:50:d3:f9:00:9c:6a:72:b9:48:d4:1e:
10:4a:5b:ca:b4:f6:8c:25:24:75:e3:19:aa:8f:18:
3d:39:af:24:7e:c9:28:40:e6:c4:fe:21:ce:9c:82:
09:6d:2d:12:47:e9:e1:d5:20:bf:39:de:29:5f:b3:
78:10:46:ac:d9:ca:3f:ee:31:7d:1b:b1:99:1b:d5:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:E6:64:DD:08:EA:2D:40:B8:CE:62:BC:13:59:C0:F4:55:F0:5A
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:fc:37:b4:65:34:78:75:e6:07:7e:75:5a:b7:84:e3:a7:
3a:5f:f3:a5:7b:7e:84:00:7c:6c:9f:b8:1a:93:4f:87:b4:e3:
dd:e6:46:a0:df:6c:57:f1:b0:dd:e8:c3:fc:1e:4e:d9:ac:b8:
bc:03:3f:ca:65:60:56:d9:34:51:32:12:e4:30:74:b9:30:34:
38:da:72:00:53:4d:f0:d3:f1:33:e0:48:31:92:0e:b1:b5:a6:
30:cd:c1:bd:c9:83:44:da:05:db:76:3a:54:de:e1:c3:fe:f6:
75:7b:3e:f7:a0:85:71:26:2a:3d:79:f8:0d:89:60:4f:1a:cc:
3f:bc:d8:63:0c:0b:62:a3:18:72:34:83:37:6e:fb:8d:6a:a7:
0d:f8:c4:0b:ca:85:d3:4b:28:58:e5:a1:61:f8:61:fe:ec:32:
0f:bd:f6:5b:4b:6d:7b:c9:2b:0f:12:b1:32:0a:b1:00:85:f5:
2e:34:cf:94:0c:03:17:9a:54:04:16:b1:d8:8d:fb:4f:73:1b:
d4:62:77:75:57:eb:80:3d:86:cd:51:6a:13:ff:f6:a3:3f:2e:
94:e7:8a:56:1c:b7:b8:d3:d7:a6:12:0b:2d:7a:1b:f4:92:fd:
b1:bd:37:77:c7:00:40:01:ca:d3:ab:00:47:c6:8c:07:97:43:
d7:cb:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:44 2025 by rpki-client