Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: GQlISVmuS+H2xleRH4gvchOGP+HqXrHxw2HRqzIZ4aY=
Subject key identifier: 52:A7:54:ED:DC:0C:B5:9E:36:21:41:60:30:28:AD:DF:1E:12:BB:C1
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 0198D5F137AA4903E489C852525BCE86B942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 05F0
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: YB/S0zzUTa1d9HHeOCCN+SCAoNLKQr56QgfT3Egn1MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:37:aa:49:03:e4:89:c8:52:52:5b:ce:86:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=52a754eddc0cb59e362141603028addf1e12bbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:65:87:d3:b2:02:98:99:e1:0c:fc:a3:6e:
d9:3a:c5:17:1d:2a:b8:81:e4:16:f8:dc:6c:fa:40:
6b:7f:19:15:5e:1d:e4:03:db:a9:1d:f0:15:d8:2c:
be:14:72:5e:eb:98:1e:91:48:1f:e1:9e:1f:f6:64:
36:20:52:64:9e:46:b4:7e:50:31:5f:69:11:63:b3:
47:7b:3b:bf:a8:4b:ce:f7:0e:af:db:63:f0:5b:01:
54:aa:57:d6:b1:ae:e2:0a:d0:f1:96:dd:64:c0:c1:
1e:71:bb:38:ae:69:5e:c2:7f:06:2d:81:30:69:13:
3d:8d:37:1b:d5:00:69:4b:58:29:01:27:d8:10:e7:
29:1a:b4:a5:71:43:2f:26:5a:cf:54:bc:22:59:9f:
8f:1d:5d:af:aa:a0:ee:46:2d:9f:e7:e7:e9:a7:28:
fb:bf:7c:c3:38:bb:07:de:17:c0:e7:5f:41:4a:c9:
55:bd:a2:28:9d:bf:23:4f:79:84:f6:ee:bd:5d:e6:
70:9e:8c:ae:dd:cf:7d:39:26:9a:05:96:1c:ae:8f:
9f:bf:88:28:fb:8b:7f:d0:95:4c:09:76:48:7a:d7:
f5:be:cd:a0:e5:a3:6b:3a:13:30:4c:a4:fd:a7:9c:
e6:3f:ea:2c:89:10:78:dc:33:d9:f1:1e:d9:64:35:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A7:54:ED:DC:0C:B5:9E:36:21:41:60:30:28:AD:DF:1E:12:BB:C1
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a2:9b:3c:1d:e7:62:a1:9a:50:e4:7f:86:b9:73:53:41:e8:
ef:a9:59:db:c2:15:c7:29:c1:87:ba:35:82:dd:d5:89:9e:a1:
c3:41:08:62:5c:2e:bc:f7:fb:7a:e1:24:02:9f:0e:a7:7e:7a:
5e:86:89:03:62:9a:24:75:ac:f7:56:7d:cf:6a:bc:3e:0b:80:
63:80:e5:04:6e:02:3c:a1:c8:df:c0:37:43:6d:e9:22:bb:9e:
03:aa:c1:7b:df:90:c0:f6:38:ed:01:e3:8d:59:d4:90:f4:b7:
8a:80:ab:fb:c6:af:0a:76:d5:2c:cb:18:c0:de:03:04:50:9a:
6b:65:5b:e8:22:35:9b:9b:69:6d:32:8d:f5:2c:53:bd:ac:42:
97:23:e5:18:a0:fd:fd:16:97:96:e8:10:1a:31:42:16:a6:08:
64:99:4b:cc:57:fd:ae:d0:d3:6a:a8:66:b4:97:80:a2:cb:b1:
11:95:2d:c2:02:66:9f:73:3b:df:04:4c:ee:5d:ee:65:a4:0b:
04:70:7e:4e:63:98:1a:f8:92:82:89:d0:dc:70:9d:8e:6c:bd:
dd:9a:d7:a9:e4:25:9e:05:17:27:99:aa:97:d0:30:8d:a0:81:
93:95:db:c1:95:70:7a:63:d9:e7:b0:2f:8a:4b:74:36:5f:50:
bf:7b:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:25 2025 by rpki-client