Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: 1DrEop+ZIgrtFEb1AOh7XBzlPMbIlMpCjDArR0iRDIY=
Subject key identifier: 79:D0:89:C9:38:DB:26:32:7E:03:6C:88:FA:BD:30:A5:97:07:18:A4
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019875629E3751F2D7DDF5895E8FF7CF5577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0981
Signing time: Mon 04 Aug 2025 14:00:53 +0000
Manifest this update: Mon 04 Aug 2025 14:00:53 +0000
Manifest next update: Tue 05 Aug 2025 14:00:53 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: D6m8Ykz3/N4vxcoSOY41EG5hJXB2bSI9lqvC/C3yyTA=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:9e:37:51:f2:d7:dd:f5:89:5e:8f:f7:cf:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Aug 4 14:00:53 2025 GMT
Not After : Aug 5 14:00:53 2025 GMT
Subject: CN=79d089c938db26327e036c88fabd30a5970718a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:94:0f:48:59:69:e7:9e:7f:27:72:03:1b:
86:1c:2a:85:f5:9b:57:40:2e:2f:44:60:ed:7f:90:
bb:f0:e3:85:ed:0d:a6:9a:ac:c2:d1:fc:f1:cc:90:
95:05:d0:c0:a3:d6:23:3e:1d:89:60:bb:ee:37:11:
2d:cd:ea:19:6a:a1:db:78:c4:e9:3a:a8:e7:bf:aa:
85:b2:d7:fe:8f:06:99:32:a1:38:80:fc:ca:4a:bb:
77:88:e0:30:55:e6:97:ab:a6:90:b7:46:de:2f:f2:
4d:9d:25:21:5f:04:06:37:ea:8d:87:2b:36:4b:fb:
15:e8:2c:29:07:af:53:a6:e0:cc:55:3b:94:9f:71:
ea:1b:14:5b:2c:89:7f:c0:b0:87:d5:ec:51:1f:c2:
44:d5:20:8b:36:36:59:87:0a:6c:01:25:80:f9:80:
c3:ea:28:df:79:ff:9f:5f:98:47:8c:65:22:ae:5d:
73:1d:5f:40:a4:53:33:8e:00:40:ae:a5:92:5a:02:
3a:f8:42:3f:ac:67:51:c0:ea:d1:cf:84:b9:62:fe:
8e:2b:16:1a:f4:7c:e5:3e:a4:a5:4f:8a:69:ca:b1:
36:f2:04:a3:ee:ba:6d:c5:b7:76:56:05:b1:6f:ce:
ac:86:52:2b:ec:ff:f8:56:8a:53:a8:a8:11:a9:62:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:89:C9:38:DB:26:32:7E:03:6C:88:FA:BD:30:A5:97:07:18:A4
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:53:e9:7b:6e:72:dd:83:95:30:eb:7b:36:7b:23:b7:9f:
5e:e5:e6:88:32:22:7c:29:88:55:a6:ff:70:62:44:1b:a2:25:
a0:d8:56:9e:7c:2b:4d:26:d1:90:9e:39:2e:b8:41:1a:83:99:
7f:f8:4f:14:bb:2e:4a:99:c0:83:53:79:db:64:a8:57:2f:2f:
61:c2:d0:8c:25:4e:54:31:94:1f:f9:8d:20:27:34:72:11:7f:
cc:4a:43:07:e5:b4:ec:77:8e:4a:b1:bf:86:7d:83:fe:0e:1b:
e2:cf:1f:a6:fb:2c:5c:20:94:6f:95:17:5d:e4:d2:cd:5a:d8:
51:96:dc:49:cc:69:8b:b7:40:b4:5f:a8:92:0b:67:e1:6a:71:
d1:80:af:b8:8f:9e:2c:3a:f2:58:b7:b2:6b:e7:59:c3:15:a9:
6f:83:2d:54:2c:0b:22:e9:59:0c:4e:ef:64:25:90:96:61:68:
77:5a:8c:0b:c1:9c:7b:4a:c4:f2:ac:29:74:cc:a1:73:7d:31:
e0:35:09:6c:e8:cf:51:0b:dd:a9:91:28:95:ee:6f:55:4e:6a:
76:f4:ed:f3:58:cc:06:ae:17:84:49:34:34:c0:7b:cb:73:1c:
fa:c0:2f:1d:c7:24:14:17:f9:b4:03:ae:07:21:fe:d6:66:00:
17:58:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:54:49 2025 by rpki-client