Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: NQ+B/A//xRGZLtPYTCCFqh2VrtioR0plUY+088VGcAk=
Subject key identifier: 71:F5:AF:5A:BB:4C:2F:62:0C:45:DE:CC:BD:FA:48:1D:0A:D8:7E:88
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0198D660DB8B481CFDB3ECF6E0E37EB014B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 150A
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: 7adc3xZv9xndAC1HXWqEwqkysmxNy3/ZYjaGcvhYups=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:db:8b:48:1c:fd:b3:ec:f6:e0:e3:7e:b0:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=71f5af5abb4c2f620c45deccbdfa481d0ad87e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:d9:90:d4:66:f2:38:a7:a0:4d:02:e1:4c:
f3:a7:c1:84:ee:18:09:f6:63:fd:81:01:5c:8b:d3:
28:28:60:ae:34:63:73:ef:49:37:82:d9:4e:33:2a:
4b:3f:e8:d4:8f:7d:1a:10:83:55:5b:2f:32:8f:fe:
56:b1:b3:4b:7a:56:13:35:93:ed:50:35:ec:e9:e4:
21:59:c5:2d:d4:bf:ad:38:97:e0:42:58:c0:45:b4:
ee:81:70:30:c5:ef:93:45:5b:91:82:a5:3a:c7:1b:
be:55:cd:e9:4f:ad:35:b2:28:11:78:50:82:7f:49:
c2:33:e3:5e:70:aa:cd:03:59:77:88:fa:2e:ff:72:
67:74:09:39:d8:8c:39:7a:71:c9:4b:5f:39:68:01:
45:81:91:9d:35:80:57:56:ec:a7:5f:b9:2f:61:bb:
b8:9e:f2:ba:8a:8e:6b:34:09:02:4f:ba:51:b9:64:
ad:6c:c3:04:f9:d9:d0:43:5a:81:e6:00:c6:74:81:
cf:34:6e:47:bb:7f:8d:08:31:3c:2e:c7:9d:ab:a0:
bd:e1:e2:48:5f:81:0b:a7:d9:19:f9:fa:2e:54:50:
1d:8d:44:62:d5:f4:67:6f:0d:1b:14:4c:55:d3:c4:
71:f8:5a:fe:f6:65:c4:55:57:53:c3:df:c6:3d:08:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:AF:5A:BB:4C:2F:62:0C:45:DE:CC:BD:FA:48:1D:0A:D8:7E:88
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:38:71:99:fb:02:e9:5b:b5:83:ce:7a:85:d8:75:ad:fc:
f2:35:22:3a:4f:1d:50:ec:57:ce:a4:a2:d2:86:6b:de:1c:8c:
b5:7f:4a:a4:79:98:e0:3c:26:f0:fd:df:30:8d:93:26:64:9d:
dd:8f:bd:6c:c4:eb:91:20:70:cb:5f:f2:31:6b:52:ac:b0:cd:
45:45:91:7e:34:7e:92:83:93:77:35:8a:03:9a:cb:d1:2a:81:
8c:0f:d7:47:cc:49:8a:c9:dc:0a:d6:c1:1b:f8:2d:db:8f:d6:
af:02:49:41:5b:71:89:47:49:05:0c:8d:db:a1:6b:e8:b9:24:
8e:8b:4d:5d:06:ad:52:88:9a:4c:7c:10:f3:45:2d:8f:7b:fb:
ed:c0:b2:f0:2f:59:a1:0e:97:41:b7:0b:d3:be:a7:b2:e9:8a:
30:92:2e:95:98:e3:f0:76:d7:cd:ab:48:b7:e8:3b:7b:fd:82:
a6:c6:77:3d:52:f9:ad:4f:3c:54:4a:80:78:e0:9c:fe:52:7c:
71:2d:06:97:66:3a:02:16:df:40:16:14:a0:7e:1d:08:12:53:
4f:b5:eb:f1:43:6f:d5:2f:87:55:36:ff:32:52:d8:6d:b5:5b:
88:e6:56:31:f3:91:3a:54:22:ae:f8:ba:1c:7c:53:b8:27:2c:
70:e0:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:44 2025 by rpki-client