Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: TDkAEoByUSi+h/LfMevWT/5ZuQmvccVNcv3rYxfAk1k=
Subject key identifier: 81:7F:9B:5E:F9:C3:29:77:F7:A9:89:32:62:A4:70:EE:84:E3:2F:C8
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 0198D4E070BD3175C49F397CACD7B0A25CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 1383
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: iP0TnZ8WehGCVdK8YXS+zjYTrOw10ZYaZG9K/vnWQuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:70:bd:31:75:c4:9f:39:7c:ac:d7:b0:a2:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=817f9b5ef9c32977f7a9893262a470ee84e32fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0d:3d:9d:fd:b9:b3:21:db:c5:46:c8:71:93:
7c:0c:1c:ab:6e:4e:08:f0:08:f9:eb:14:28:d9:8d:
ed:ad:fc:78:77:58:55:f8:d7:c2:e9:d6:11:4f:77:
45:e5:37:6f:a0:2d:d2:d7:9a:05:10:0e:58:0a:ac:
7d:8d:8a:72:40:48:61:b5:87:de:48:5f:d9:59:e4:
b5:ca:87:ef:f5:29:96:4f:b0:9f:35:ec:74:db:43:
38:54:ba:fe:7a:ca:28:55:d1:5a:d3:7f:e8:c7:61:
e0:a9:69:91:48:c1:92:0a:f0:c8:ed:c5:ba:44:07:
de:a2:0e:ae:92:1c:0b:cd:4f:2b:92:4c:8b:54:4f:
d3:1c:24:55:62:b3:c1:2a:06:5e:3c:5a:3b:79:63:
ee:b7:ab:66:6d:32:db:8f:b1:5c:4f:df:bd:82:08:
cb:6f:2b:f5:a1:ba:5e:40:2d:19:8a:bf:cb:e6:6c:
f7:0d:56:5c:ae:48:ab:6e:f5:d1:f2:db:65:a5:33:
38:5d:f9:c1:ec:0c:53:3c:b2:91:7c:dc:4a:09:11:
32:16:c2:9c:35:bd:2c:75:57:ce:10:4e:57:a2:2f:
8c:e8:58:fa:92:3e:a1:f3:b4:df:26:15:cb:29:4e:
0c:7d:32:03:38:73:e0:97:ed:18:c7:94:ed:a9:94:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:9B:5E:F9:C3:29:77:F7:A9:89:32:62:A4:70:EE:84:E3:2F:C8
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cf:d7:7a:a3:44:f6:ad:71:15:d4:27:d7:60:c1:f1:ff:24:
51:a0:f7:12:53:76:9a:40:c4:dc:2e:dd:34:e6:8c:89:44:55:
e9:3a:a1:d2:44:1b:67:98:0f:2f:97:31:3b:1c:86:b3:d1:92:
ba:a4:a1:26:00:9a:54:65:d7:8f:88:9f:8f:be:47:06:af:74:
ea:18:d7:80:ad:74:00:10:98:f7:5b:4d:24:73:f6:4e:8b:d0:
bc:d2:a8:c8:5f:bb:3e:5c:47:83:13:0e:e5:3a:d8:ee:b3:60:
f7:03:de:96:72:e9:1e:84:10:d9:19:f5:6f:33:ad:4c:cf:7d:
79:3c:5f:49:f9:a1:04:bd:c6:f0:46:1b:90:11:62:68:bb:f0:
d9:62:8b:ae:91:86:6f:ca:b5:49:f3:a4:98:39:55:e4:91:67:
6a:a3:45:98:fa:30:f6:0d:6c:91:c0:3f:75:ae:0a:b4:75:56:
dc:a3:be:45:ec:6e:24:35:3a:40:98:42:0d:20:5c:34:9d:cc:
04:75:d4:51:ab:5a:01:d7:f1:80:b0:66:b4:d2:31:15:aa:74:
21:b8:fa:0d:8f:b1:17:05:a2:61:93:01:6b:b8:1d:22:80:ed:
80:10:84:d9:06:a1:38:5d:19:dc:a6:c0:e1:28:98:6f:89:25:
07:23:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:48 2025 by rpki-client