Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: FNMXy2IeC5EU1PABydIGVrnBvXGPaoCgWDz3kFow/xA=
Subject key identifier: 34:1D:2D:F3:3D:F9:A9:C2:5D:E0:83:F4:7B:5E:72:DE:FD:42:5C:1D
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 0198D4A8474202CCD0BF560D4814B9E054D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 06C9
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: QJyGFTkRJEAPK5K3EJtQT2fBS0mY7cwLjFmEQ++utJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:42:02:cc:d0:bf:56:0d:48:14:b9:e0:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=341d2df33df9a9c25de083f47b5e72defd425c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:90:a4:8a:9f:e5:21:07:cd:37:84:cf:fc:
11:01:16:42:b7:60:cc:e5:d3:82:e9:73:a4:63:c2:
3f:77:3a:d1:18:59:f7:bb:48:c5:f9:d5:00:49:b9:
c7:2b:01:b1:89:b4:e0:8e:18:13:c2:32:8a:ed:c8:
27:e1:81:fd:5e:0c:75:15:8e:4b:c6:fb:47:c9:08:
ad:7f:2f:66:54:28:00:7c:8f:c2:46:65:ba:f5:df:
dc:ae:5b:14:6f:a0:b7:2b:15:b3:7d:0b:25:bf:a8:
d1:56:dd:ba:d0:94:88:90:33:21:d7:0a:46:63:94:
bf:48:90:3f:5b:2b:71:75:e9:81:c6:47:3c:5d:f5:
27:d4:0f:bd:f6:92:67:0c:1f:27:d3:2a:74:27:2c:
2d:fe:43:87:40:b7:2e:9d:81:67:e6:5d:8a:9f:58:
e1:5a:60:66:58:95:db:25:06:62:df:b1:78:af:b3:
da:e3:b5:0f:f4:6c:4f:d6:8d:7f:30:c1:18:27:9f:
aa:9a:46:4a:26:d9:6e:1f:6a:f1:75:19:44:0f:5e:
d3:56:00:80:ba:36:d6:34:f0:b0:38:10:51:4e:1d:
db:16:17:62:68:f6:e3:7a:ab:95:37:96:61:8c:5d:
5e:ea:af:94:b1:96:3e:04:c8:c5:81:f4:22:a9:07:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:2D:F3:3D:F9:A9:C2:5D:E0:83:F4:7B:5E:72:DE:FD:42:5C:1D
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5d:4f:4c:80:ef:e0:92:a7:08:ac:8a:3a:62:a3:45:ef:14:
80:4a:15:ba:be:12:21:09:84:41:a0:21:29:ff:2f:34:08:81:
f5:a5:f1:3d:7b:7c:a6:2c:b2:4b:fa:76:53:cb:e9:aa:dc:06:
2e:4c:4c:f8:dc:30:68:af:00:8e:f1:48:01:f2:29:09:3f:5e:
cd:69:98:00:f0:57:48:3e:73:86:be:8a:5e:1e:48:ff:96:82:
b3:e1:6e:dd:28:2c:3f:b0:bb:2e:4d:c8:0b:01:79:30:9f:fe:
01:aa:98:c9:fa:dc:51:d2:59:dd:2f:9a:29:9d:6e:71:f1:92:
2e:79:fc:41:90:40:30:8b:81:49:92:18:26:5e:4c:60:bb:0d:
9d:19:f9:6f:f9:dc:42:10:8d:32:51:57:27:88:d9:cf:19:be:
59:1a:9b:0b:58:4c:f0:71:3f:6e:96:e9:a5:d1:28:93:a1:9e:
69:54:a2:eb:0a:98:ab:b6:47:92:2b:45:ab:88:4f:b8:d8:2b:
ea:bb:7b:c0:c2:db:53:3e:df:51:02:11:52:15:d3:1c:70:f6:
f0:f7:ba:cf:b1:c3:82:7e:1c:e6:6c:c7:3d:b6:bc:38:5c:9e:
ad:f0:68:de:b0:48:1c:50:ab:c5:54:4a:a7:09:ff:9e:ab:c0:
7a:d3:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:19 2025 by rpki-client