
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: WZFh23jY0wS6l21yUtLZ40Byzf29lS8MGxE/cRd+8rw=
Subject key identifier: 19:3B:6D:71:11:F6:A9:DA:07:FB:EA:60:84:EC:DF:0A:3B:56:CD:9D
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 01988DA1E892889119122AE7E9EAD5A5C6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1635
Signing time: Sat 09 Aug 2025 07:00:54 +0000
Manifest this update: Sat 09 Aug 2025 07:00:54 +0000
Manifest next update: Sun 10 Aug 2025 07:00:54 +0000
Files and hashes: 1: 1F9MijuQpgadBC0qomGmUYJZ8Qo.roa (hash: +dDzScNaK5jHBDGWnNSKAKH4zr9szjlmXCKJdH9h2oE=)
2: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
3: bDiIn-_UXIGuw3Qo4clxFIKAqAE.roa (hash: rYwZ+l52WfQynuoiZucorfpRFkeDzJfCrE/NRMJMIic=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: IfnUCBDJxPX5N9EikR1+YL6n8zpvjIvxHpSQMR8GKhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:e8:92:88:91:19:12:2a:e7:e9:ea:d5:a5:c6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Aug 9 07:00:54 2025 GMT
Not After : Aug 10 07:00:54 2025 GMT
Subject: CN=193b6d7111f6a9da07fbea6084ecdf0a3b56cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:d7:2b:83:23:f6:c9:b4:52:b9:97:96:d1:
7d:94:c9:02:3e:74:e0:c6:dd:fc:97:87:48:90:96:
ec:94:b7:27:29:fb:86:9f:c3:0f:13:d1:97:e1:fb:
13:f0:86:b2:ef:d4:01:b8:11:21:8e:d4:74:4c:44:
f5:58:94:e6:bd:47:d5:33:3c:49:c6:92:16:15:50:
0b:74:f0:50:99:45:f8:6d:db:24:0d:ea:53:0d:36:
51:29:2e:ae:27:19:87:9b:6b:6a:31:f0:73:c2:6d:
82:dd:1d:22:f2:8b:29:86:49:a6:84:71:61:95:76:
bd:cb:b5:21:51:9d:3e:01:ae:25:8e:be:ff:c4:e8:
54:8e:72:a3:bd:ab:13:e2:fb:e5:b5:26:9f:23:ce:
08:b5:c6:4f:89:df:c0:23:23:be:5b:e6:cc:d4:ea:
34:b1:9c:c9:30:0b:db:ae:cb:5a:88:d3:73:82:37:
d9:e9:7b:63:00:96:f1:72:db:0a:da:de:a6:c1:d7:
06:19:53:cc:d3:55:37:9d:25:20:77:b9:c2:0f:67:
a5:69:ef:5b:78:8e:90:a5:87:df:80:c0:b8:6f:f2:
45:af:b2:1e:e0:ce:c9:df:07:70:51:35:0e:f9:5d:
1b:3a:95:c4:fb:72:48:c4:0c:e0:c2:73:6a:1a:86:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:6D:71:11:F6:A9:DA:07:FB:EA:60:84:EC:DF:0A:3B:56:CD:9D
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:3c:8a:87:89:81:b5:e9:26:63:6b:76:72:21:2d:dd:61:
16:85:a7:b9:1f:12:fa:bc:0e:b9:5d:bf:1b:62:e7:ff:03:36:
3e:7d:ca:0a:cf:f9:cf:ed:57:3f:7a:da:f6:fc:7d:b2:f1:95:
ba:d1:bf:62:e6:9f:b0:68:9a:f3:b0:a8:5d:f9:36:aa:d0:4a:
c0:93:eb:60:fb:e1:95:e0:f5:a7:87:54:be:aa:97:8d:13:66:
87:79:06:2b:68:ec:8d:95:b0:88:f9:8b:11:41:01:29:28:2a:
d1:53:f6:6c:cf:8e:a3:c2:6e:09:bf:3b:f2:40:6f:10:eb:03:
ef:f3:30:9b:87:bb:e4:11:09:bb:29:91:8f:f8:1d:08:85:ed:
6a:60:27:23:9e:6b:96:82:bc:5e:88:a4:61:2a:61:47:06:a3:
db:cb:cf:44:bf:46:2f:16:92:92:e6:69:f1:a3:ff:3a:2b:85:
ff:b2:1c:8d:fd:60:56:6d:8f:37:1f:51:10:59:16:9f:f1:79:
fe:9a:53:d5:9a:1f:cb:2d:a4:76:54:d0:b4:c3:3f:5c:03:45:
26:66:f9:d0:e2:52:21:65:a0:ba:f4:60:74:91:45:ed:3a:c6:
9e:dc:59:de:62:14:50:06:2a:49:03:55:47:35:be:20:75:c4:
b6:2b:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:06 2025 by rpki-client