Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: eft6BwuVwHtNS3KNQegkfNhMDsKTUeuU94NoDW4fxeE=
Subject key identifier: 2E:CB:39:94:39:3B:74:87:63:BE:B2:1C:02:92:0B:DB:74:7C:B8:AD
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0198D54DCA7FC62B9A9C0273712D6A1835B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 096D
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: wMvyZ8iwA1ht6hhQu43JMjxG8k9VcHCCuU7SIYSVTcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ca:7f:c6:2b:9a:9c:02:73:71:2d:6a:18:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=2ecb3994393b748763beb21c02920bdb747cb8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:95:82:1f:7b:3f:b5:51:a4:9b:52:65:d6:
ff:86:da:e7:3c:b3:78:dd:e2:17:56:61:b0:92:bc:
aa:82:6b:80:7f:06:9c:65:38:4b:6d:00:d4:ad:7d:
6a:0f:c8:e2:04:a8:ae:36:e8:8f:48:1b:4f:3f:3e:
9c:da:75:56:80:25:73:78:a0:33:53:79:80:b3:9e:
61:39:a4:f3:a2:2b:8b:57:e8:c6:54:0e:12:fe:20:
c6:bf:e8:6d:8d:b0:1a:d5:89:63:55:a1:9a:a9:4e:
83:db:e0:2a:6d:c1:34:fc:b8:c4:f6:27:b8:d1:33:
17:da:9d:9b:ed:ad:c3:18:ea:63:d4:b6:c6:d6:e7:
63:7d:c2:0a:9a:d9:85:f7:1f:52:ef:85:40:28:9c:
88:62:06:70:0e:15:a1:96:6a:1b:fd:de:a3:62:03:
6c:8d:3b:8e:60:fd:1a:9f:85:32:74:3c:f9:17:4a:
8d:79:69:b9:6b:e0:2b:d6:13:22:53:5f:1c:55:5f:
b5:bb:00:5f:40:e2:04:3f:1c:67:24:86:55:65:80:
7a:18:2b:11:0e:4d:64:1d:cc:94:1f:21:35:11:64:
08:d4:8d:c9:2f:1c:76:a8:b6:0c:4b:8d:59:05:b3:
f2:c1:69:c1:02:7c:35:8a:70:1a:15:ba:3e:f8:45:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:39:94:39:3B:74:87:63:BE:B2:1C:02:92:0B:DB:74:7C:B8:AD
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:d8:06:33:2d:7e:44:18:2e:a6:c3:50:b3:7c:89:aa:b7:
8e:60:5b:cc:ba:d1:3e:e3:bc:82:9d:f0:d5:2e:00:34:34:03:
e1:c9:3a:ac:22:db:95:70:a8:68:e6:4c:5d:26:0e:4d:1a:ba:
e3:73:77:11:16:07:a6:61:e0:b3:82:f2:48:0f:9a:da:41:91:
1e:f2:cd:d8:e6:83:a9:7f:00:58:d4:20:bf:38:fc:33:56:0c:
4c:ca:dc:45:74:0f:a7:f0:02:bd:b9:6b:d8:87:78:61:57:09:
71:45:c9:17:39:29:2f:4c:56:06:b7:be:5c:67:af:b8:c9:67:
a6:61:86:07:a3:16:26:46:8e:12:7c:b8:11:1c:34:46:f6:22:
7d:5d:28:57:a3:89:31:98:9b:a4:a4:db:1d:87:f7:fc:97:c8:
d9:b4:c7:79:03:4c:77:46:79:7a:c4:d6:b3:11:bc:99:eb:d5:
5b:1b:04:5f:a1:ad:a1:40:df:e6:32:e6:1d:15:56:06:b8:36:
18:3f:88:25:8a:e1:2c:c7:0e:fe:f8:e8:67:a3:ec:c7:c1:20:
56:ea:15:ec:18:a0:da:7d:d5:1e:8e:e2:aa:46:3f:02:1a:07:
36:38:6d:c1:57:28:4e:01:5d:1c:d4:03:a7:ba:68:71:a3:d2:
f3:1d:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:43 2025 by rpki-client