Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: 5vU/gIW6q27a9yaUw1zL0YpXaw71jWUJbfjpGbz22AA=
Subject key identifier: 23:55:70:8B:DD:49:B2:32:60:CF:B7:3F:ED:1B:20:A5:FA:F4:9E:AE
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019873E324C0521056BCD1AFA84D2E861A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 07:02:02 +0000
Manifest this update: Mon 04 Aug 2025 07:02:02 +0000
Manifest next update: Tue 05 Aug 2025 07:02:02 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: QkE2RABToI0YK1FHD+Q08me+1GE60UfV6mXJQuwizEY=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:24:c0:52:10:56:bc:d1:af:a8:4d:2e:86:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Aug 4 07:02:02 2025 GMT
Not After : Aug 5 07:02:02 2025 GMT
Subject: CN=2355708bdd49b23260cfb73fed1b20a5faf49eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:8f:e7:02:29:d2:25:7d:89:05:5e:d3:7b:
51:bc:6e:12:19:fb:49:52:30:d4:79:03:7e:ff:95:
c5:52:47:d3:62:cc:fa:16:47:dc:08:fb:74:80:27:
bb:cd:75:96:85:c3:1a:e1:04:b8:a9:a3:dd:92:3c:
3f:31:a3:58:cd:10:46:ca:a3:0a:08:ef:92:50:2b:
1d:b6:9b:15:e4:fe:97:1f:6b:07:75:dc:00:fc:a0:
87:03:c3:85:69:df:e8:ef:61:ee:27:e9:9c:cf:0d:
b6:07:1d:d4:ae:ff:27:6b:dc:8a:ee:73:84:e9:be:
0a:d6:46:27:0b:56:eb:99:92:21:a3:70:39:db:0d:
3c:0c:32:5b:de:32:e2:ac:d0:32:0c:16:19:80:8c:
78:09:53:e8:c6:36:e9:d9:1f:e1:63:b0:1c:37:b2:
20:94:42:a5:09:53:20:c5:50:84:50:9a:ec:4d:a3:
62:9a:00:f3:35:dd:de:f7:73:8f:95:e6:a4:cc:cd:
f6:4b:b3:02:cf:fc:25:1e:bf:41:43:73:b6:6d:2a:
4c:45:ea:51:4f:10:6b:3f:05:c7:f1:b7:ae:a8:14:
4b:4b:6e:19:6b:5f:aa:d0:e2:9c:e6:e9:e3:38:87:
8e:ca:32:61:ad:ee:50:0f:22:f8:bf:30:ae:dd:16:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:70:8B:DD:49:B2:32:60:CF:B7:3F:ED:1B:20:A5:FA:F4:9E:AE
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:f5:8f:ee:ed:06:82:cd:93:be:f4:4d:02:e3:5e:d9:97:
0d:5d:4a:bc:d0:1b:bc:81:36:5a:76:1a:7b:fc:aa:dd:74:c7:
69:bd:6a:99:e0:55:e4:00:37:cd:66:94:05:8d:87:d2:fd:53:
34:2c:43:79:2d:38:50:95:50:53:ea:ce:09:e6:cf:70:17:de:
c7:e3:68:dc:47:ca:e1:ff:c7:26:4a:96:36:43:ef:eb:22:8f:
23:27:f3:9f:04:7d:6b:7e:0e:8c:2d:57:d3:5c:75:b7:13:1e:
50:cc:ec:6f:a9:1d:2f:c2:a1:fc:9f:63:f2:33:86:56:ac:58:
1f:47:be:3c:61:76:a2:c2:1f:0b:bf:ab:fd:9c:1d:9a:05:8c:
85:55:b5:b2:04:2a:4a:a3:9f:fe:1c:98:6a:da:d5:28:79:c7:
07:9d:2b:92:96:7e:0e:18:1f:a8:ec:0f:87:c6:27:9c:da:29:
e6:09:0d:40:aa:28:6c:8e:52:10:92:1a:35:d0:42:a1:11:22:
c0:b2:12:04:58:db:c2:49:db:39:5a:61:13:14:9a:05:01:ce:
c9:93:e6:35:4e:7d:87:8e:c8:b4:73:67:8a:a4:e9:99:80:a7:
d4:73:74:39:ea:62:cf:1c:9f:dc:cb:d6:8b:47:cd:39:e9:d1:
6a:60:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:05 2025 by rpki-client