Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: fda0Kqe45Y1SDlDo5j0FLzfrLZcbLHjdxcSLsOR87bY=
Subject key identifier: 5C:09:9E:FF:C0:74:89:B7:70:F1:9B:3A:B9:43:F8:BF:0D:14:BD:44
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 0198D660BA6346503118BAD42E558A08F2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 0F4E
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: +rMucufIQv2lpsxnHsOamhKlEd3mf+LNsGH+WD3v+aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ba:63:46:50:31:18:ba:d4:2e:55:8a:08:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=5c099effc07489b770f19b3ab943f8bf0d14bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:39:0d:d1:bf:61:25:47:6a:70:d0:08:88:
a0:a7:4f:20:c2:d6:a1:a9:e9:46:6c:e4:31:84:9a:
62:5e:67:d8:8c:63:f4:29:83:83:81:c3:27:1f:37:
89:49:61:aa:86:a6:fc:55:81:2d:9f:63:17:5e:ce:
c4:e3:7a:e9:67:bc:45:37:90:87:2b:a1:d9:dc:f8:
49:a0:d4:3e:5d:6f:8b:1b:dc:0a:b3:fa:5b:8b:bd:
3f:f2:5d:25:fd:34:1e:92:cf:b2:b4:df:1c:8e:e8:
b6:94:e5:78:a2:90:0e:c5:0e:79:b9:c7:89:94:10:
73:1a:7e:ac:c7:fa:0f:fc:c9:2a:47:60:14:ac:0f:
40:fb:6c:b3:36:e3:a0:cd:cc:f7:1f:7f:4d:69:ea:
e0:d0:16:a9:ad:95:08:a9:8a:a1:f2:12:5a:e8:a3:
75:08:70:95:b1:89:ed:3d:b5:39:05:d1:5d:67:42:
a7:ea:2f:65:44:da:e4:6d:30:07:90:73:1e:1a:a7:
34:27:8b:01:d5:7d:c6:44:3a:fa:fd:ba:50:92:32:
b5:f4:39:1d:0e:74:6e:00:b5:b5:1e:02:c6:2e:12:
40:b1:cd:02:8e:8d:b5:df:42:e3:4c:84:e4:c2:56:
14:b8:7d:3b:53:7b:02:e8:e0:96:70:a2:90:71:4f:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:9E:FF:C0:74:89:B7:70:F1:9B:3A:B9:43:F8:BF:0D:14:BD:44
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:74:7a:8c:f4:ad:0c:e0:01:5b:b4:fa:2f:20:00:f7:71:30:
27:64:c7:fa:67:cc:85:e9:9d:ed:03:23:5e:70:aa:55:04:9f:
ea:6f:17:0b:b4:33:51:64:d5:1c:96:f0:b7:e5:7c:ba:b5:d0:
85:40:b9:fc:25:66:4c:0c:42:ba:aa:94:44:27:31:29:7f:c7:
7c:66:2a:77:25:35:12:68:b8:e1:22:a7:76:57:9d:c8:8f:d1:
70:2c:a1:c6:ac:f3:84:0f:d1:e6:3f:f4:99:a2:56:86:1f:b0:
cf:40:dc:98:24:45:a6:0f:32:c2:57:04:23:45:5a:6b:47:50:
85:69:ed:d8:1a:10:4b:77:08:b3:4a:b2:62:d7:2b:63:0c:15:
cf:dd:92:2f:86:ca:53:34:c2:ac:6d:a1:8a:db:a7:af:5b:fa:
78:bb:60:65:ec:6f:02:71:f1:e6:4e:6d:2c:2b:89:bc:e3:29:
87:5d:71:1b:5c:76:67:91:80:b6:2a:45:51:5a:c6:b1:a2:d7:
4b:24:a4:2c:99:37:f7:45:30:24:c8:bb:32:6f:a6:60:35:0e:
a1:b9:78:07:da:ee:aa:df:51:2e:ec:0d:96:88:10:1b:4d:37:
d1:9c:fe:09:f7:15:dd:bd:a0:3c:9b:2d:a6:39:57:dc:db:58:
2f:0d:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:35 2025 by rpki-client