Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: f75gQOfDq9e+YVl1MkFQ3Yugh61rLOH3iECwcUXZ0/8=
Subject key identifier: D6:59:A0:D5:92:20:49:A3:E6:31:CB:A2:86:55:01:52:5D:A8:4A:F8
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 01989E5FD6E6EBD1BF3AA5AF722487D9A019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0C23
Signing time: Tue 12 Aug 2025 13:02:17 +0000
Manifest this update: Tue 12 Aug 2025 13:02:17 +0000
Manifest next update: Wed 13 Aug 2025 13:02:17 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: pR+Z5B0k8ywf2N/xmElXFGvql61C1gwaftsvVVDdMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:d6:e6:eb:d1:bf:3a:a5:af:72:24:87:d9:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Aug 12 13:02:17 2025 GMT
Not After : Aug 13 13:02:17 2025 GMT
Subject: CN=d659a0d5922049a3e631cba2865501525da84af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:c0:63:2b:48:15:a8:6d:9e:5c:68:e5:4c:
d8:1a:b7:c5:ab:88:6f:08:c6:0b:45:76:5b:3d:d8:
3e:f3:2d:29:1b:e6:42:73:93:59:78:36:a3:07:17:
c1:65:b6:f5:21:8b:8b:22:16:64:d3:df:64:70:99:
b0:09:12:a3:5e:b8:8c:d1:7e:f4:80:45:28:72:53:
c1:f3:a6:9b:c2:01:b9:3a:1d:30:8f:d0:d1:78:fd:
6a:cd:69:5a:01:98:04:e6:29:24:d8:eb:c1:7a:99:
bc:b0:9b:63:d2:c7:99:a5:08:d9:b7:59:48:84:45:
91:2f:a7:62:c9:5e:d9:b9:95:b2:25:ad:1a:35:4b:
23:d0:88:c7:c7:7a:ac:a3:8c:c2:6f:1a:dd:2b:46:
2f:b9:9f:e2:c1:af:c8:e4:d1:70:3d:ad:86:5a:86:
2f:e3:87:57:f0:6b:ac:e2:18:8c:7f:6d:0c:cb:f3:
26:68:60:dd:2a:57:74:5f:ca:d7:ad:97:93:c6:7a:
8f:f9:0f:52:ed:8d:ce:05:a5:f3:83:75:a3:11:87:
3f:6d:84:13:a3:32:e4:e1:4b:b2:b4:15:04:cd:79:
01:4f:a3:c7:22:78:5a:69:f1:03:9a:79:09:70:04:
fb:0a:e1:6d:e5:8d:f6:c1:87:23:54:bf:a9:35:2a:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:59:A0:D5:92:20:49:A3:E6:31:CB:A2:86:55:01:52:5D:A8:4A:F8
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:08:03:ee:e5:76:3d:98:65:4b:b2:5c:2a:26:de:d3:e6:
67:d8:1c:23:e4:d9:15:37:c8:19:4c:6a:7e:94:29:b1:bc:ee:
a7:8b:50:be:77:f7:4f:f9:c0:d5:72:e0:20:90:0e:cc:4c:39:
86:18:4e:ce:54:24:83:6b:d4:25:8b:dc:fb:fa:0f:a1:a6:e6:
6d:cf:b9:aa:6e:f3:4b:68:ff:82:8f:3d:78:26:14:a4:52:14:
03:24:00:ad:44:81:73:cb:05:49:b3:2d:71:aa:53:18:73:be:
94:d2:b9:60:dc:42:1e:7d:e8:7d:f9:07:51:5a:e3:8b:36:b2:
ca:e8:2e:0a:0e:40:25:15:be:a3:85:d7:60:32:52:87:2d:af:
1e:9d:8f:25:2f:c6:f0:69:3f:f0:e9:4f:59:f9:ae:db:f5:6d:
0e:b6:62:52:4b:5c:7a:4c:fe:58:98:16:73:ce:b5:8c:83:56:
21:e3:9e:57:cf:f8:6d:2c:e2:3a:da:ba:c0:f5:8a:72:cb:36:
6e:b5:aa:68:b4:cc:1a:0d:25:5d:3b:eb:9d:c4:b4:9c:d7:65:
32:4b:a6:92:01:52:61:2f:fe:13:a7:52:6b:a2:95:cc:01:96:
db:a9:66:50:75:09:ab:ac:15:27:46:11:3b:f4:70:c7:d1:5f:
d6:11:a3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:53:34 2025 by rpki-client