Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: TpryMz2hzaBar5i2g3XwdGHFlfcacdj8fp/OKB2uSm8=
Subject key identifier: C7:FA:79:42:A8:A8:58:1C:65:4A:32:99:16:9E:24:61:05:8E:E2:0E
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 0198D54DD5A926BDBD7E156A005E36CCB7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: fcNMJXyaqUfAB4EpHSvfwNBjVuxI//jB7GL+/WnpHk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d5:a9:26:bd:bd:7e:15:6a:00:5e:36:cc:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=c7fa7942a8a8581c654a3299169e2461058ee20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:3c:42:64:c9:aa:51:51:0a:f0:9f:5d:93:
e4:d8:19:a7:e4:35:c7:43:8c:01:0b:b2:31:ba:eb:
f4:ba:d5:13:a4:69:9a:dc:95:11:a2:8a:6d:67:cd:
1c:a4:15:6a:f2:32:33:d1:0d:25:26:67:44:dd:c6:
27:85:27:1a:1c:5f:f9:97:6e:e7:0b:db:55:3a:9a:
dd:76:74:bb:4a:a3:8b:71:d4:0e:74:98:20:56:cb:
6f:48:5e:b6:53:51:d6:84:9f:15:50:17:8d:c7:da:
41:1a:a3:b8:6f:72:38:4a:fc:92:2b:2e:eb:d6:1b:
83:68:86:50:1e:9a:0c:e6:b3:6c:67:b4:87:43:da:
05:b5:8a:57:9a:99:67:e2:f0:35:e9:dc:35:40:b8:
15:67:53:01:e7:9a:9c:55:b5:9a:da:76:b8:d2:70:
fb:bf:de:72:dc:cd:87:e2:b3:e0:d0:24:64:2c:74:
fa:2d:97:a3:73:8c:e7:a3:05:2a:f3:df:82:19:7f:
a3:33:d9:f2:68:56:76:d4:4c:ff:ca:a9:81:2b:14:
4e:d6:08:9e:10:d1:17:a1:33:ed:7a:be:3a:0d:3b:
82:26:cd:09:bd:a8:2f:eb:f7:67:11:5c:b7:5d:57:
43:fd:b1:8f:ad:ca:3d:03:36:ea:08:ad:6e:6b:97:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:79:42:A8:A8:58:1C:65:4A:32:99:16:9E:24:61:05:8E:E2:0E
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:33:99:83:46:cc:61:82:be:7c:ff:82:d2:d1:0f:76:19:
0a:3d:71:c7:a7:9d:8d:d9:ed:56:11:6d:ac:7f:c3:cf:bf:9f:
f9:33:89:3f:cb:79:5e:92:87:45:26:dc:a8:4e:d1:52:20:3e:
14:94:80:d9:c2:19:49:71:66:cb:9a:8e:4f:40:aa:fd:26:11:
65:d5:cc:8e:af:57:7e:c6:63:47:ca:12:e2:28:5a:40:24:56:
be:36:22:70:7a:eb:fa:eb:6f:41:4c:28:98:8c:be:aa:d6:4c:
51:54:c4:cd:d2:db:b8:1b:97:06:07:ba:34:48:ca:f2:70:d5:
8e:91:af:4c:55:33:89:cb:a8:db:97:1d:f6:b4:9e:12:e6:c2:
67:47:51:cf:07:78:94:30:92:1d:a5:ef:7a:6b:d3:e9:07:ba:
86:67:9a:36:5f:44:63:b7:8b:14:27:90:e8:6a:18:d3:fd:37:
d7:f9:71:e7:ca:06:e3:56:7f:38:19:7b:13:07:6f:84:2d:06:
16:35:f1:aa:22:3b:74:fa:d4:24:67:ae:3c:bc:84:19:6f:50:
eb:78:3e:2c:de:86:2b:af:ce:4b:83:13:15:13:9f:bf:9a:8a:
c4:da:4c:92:e9:0b:db:de:23:a9:ad:72:ec:8f:71:52:8d:e8:
b1:08:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:04 2025 by rpki-client