Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: n94ASQVgmPe2k/WpAr5Sz+63h+QVsTDI/Pks1NNHydc=
Subject key identifier: 0C:A7:B0:AA:21:AF:8C:FB:12:84:AA:46:08:67:00:CE:9B:96:D0:A6
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 0198D4742F44037F65F183ED151519899D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0CD4
Signing time: Sat 23 Aug 2025 01:04:00 +0000
Manifest this update: Sat 23 Aug 2025 01:04:00 +0000
Manifest next update: Sun 24 Aug 2025 01:04:00 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: S2Hlm0M4P83fWSpMKEPBHbMXVngjd8g5apWUDgZv0tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2f:44:03:7f:65:f1:83:ed:15:15:19:89:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Aug 23 01:04:00 2025 GMT
Not After : Aug 24 01:04:00 2025 GMT
Subject: CN=0ca7b0aa21af8cfb1284aa46086700ce9b96d0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:87:04:51:8b:07:73:5a:fd:45:12:b7:ed:
a6:91:e4:63:a6:47:42:26:e3:52:70:69:85:ee:43:
a8:fc:9c:82:1c:73:20:f2:7e:17:7d:c3:2f:3b:67:
24:8b:15:c1:3b:7a:b4:6c:06:92:6d:0d:56:c8:14:
32:53:b7:80:f6:3e:59:9c:20:20:15:3e:b7:82:f6:
39:3a:40:89:29:38:04:d2:92:6b:ee:8c:a5:3e:18:
4d:82:5a:1d:30:f6:dd:7a:24:22:54:df:da:bd:46:
e7:64:9f:f2:cd:6c:51:b9:98:c5:5a:4a:66:65:7e:
8e:39:03:a8:6e:08:a8:7c:f3:6e:a1:f1:1c:86:7c:
f6:7e:39:8f:3d:7f:a9:bd:89:8f:f3:de:92:ae:97:
be:80:ae:6b:7e:0f:dd:95:d0:05:2e:df:b9:33:f8:
38:7f:1d:e5:ea:d8:3d:ba:20:e7:03:90:59:4b:3c:
70:f1:06:b7:22:8f:c9:02:0d:37:37:a1:3e:93:33:
d3:6a:a0:1c:47:ce:38:92:61:d9:34:d9:d5:9b:07:
87:95:e9:37:41:76:3e:62:5e:9b:80:92:5f:2c:54:
78:c8:77:57:d1:68:1c:31:fe:93:b7:d4:ec:9b:0a:
b9:10:f2:8b:ba:94:d9:91:44:a3:06:f0:5c:4c:9c:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A7:B0:AA:21:AF:8C:FB:12:84:AA:46:08:67:00:CE:9B:96:D0:A6
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:af:2d:cb:c2:30:96:3b:9e:7b:c1:db:a4:b9:50:08:f1:
2a:18:d8:60:51:d1:fc:1a:9a:8b:13:4d:c9:56:a5:6c:06:21:
05:c2:55:f3:e7:7e:6e:6d:74:8c:2a:30:8a:17:a8:69:3a:4f:
28:04:47:60:f4:31:b1:3a:26:54:45:e7:b6:bf:80:18:4a:38:
3a:02:fd:aa:2e:14:30:68:26:d3:30:69:64:d6:bc:06:96:c4:
e0:48:f5:7d:fb:e2:b9:d2:0f:15:c3:12:75:e5:09:e2:c6:d4:
9a:77:42:b7:10:9b:12:27:be:3d:25:be:d1:d5:24:de:18:76:
a8:5f:81:3e:00:01:2b:79:da:dd:85:28:d2:df:45:d9:70:43:
6f:a4:ac:7e:b9:15:41:e1:11:d0:b2:3d:24:dc:f2:17:3b:b8:
33:2f:f1:fe:2f:61:da:a6:ff:60:91:3f:e6:6b:18:a9:ad:cc:
0b:c1:07:49:53:84:a3:d2:5a:5d:6d:04:4e:f3:ab:6b:0a:fc:
91:52:71:35:bb:bd:ff:c6:94:85:cc:9a:18:4e:24:45:4c:ca:
54:a1:3a:ed:39:5a:6d:13:ae:8e:89:47:8b:cd:87:e4:40:08:
0d:8d:01:c3:be:d9:14:5b:35:d7:8d:68:9c:51:74:19:7a:1d:
e6:fc:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:47 2025 by rpki-client