Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: PGi4AWnMh2pUaWbMFpXDdC9Y3ZBEJ91TgUoirnHQZAI=
Subject key identifier: 87:53:64:79:C6:73:E5:7E:A9:2F:F6:F0:1A:91:E2:F3:DB:AA:9B:64
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0198D84F35616E2981905E0273344AD058C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 19:02:06 +0000
Manifest this update: Sat 23 Aug 2025 19:02:06 +0000
Manifest next update: Sun 24 Aug 2025 19:02:06 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: 9tvkyYY2d50ssGq10uyJ4LGD8TSny8Nxpp2ZFfIHVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:35:61:6e:29:81:90:5e:02:73:34:4a:d0:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Aug 23 19:02:06 2025 GMT
Not After : Aug 24 19:02:06 2025 GMT
Subject: CN=87536479c673e57ea92ff6f01a91e2f3dbaa9b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:87:bd:78:92:1f:bc:2c:02:fd:55:5a:7d:
53:22:5e:5d:de:cf:93:39:c3:ab:f6:ff:6e:eb:49:
75:7b:70:5d:ec:fd:43:11:ec:7d:22:e7:cc:a3:e6:
43:f3:80:cb:31:5e:64:81:8a:9a:86:08:ef:d4:d0:
6b:e4:fd:09:c8:ad:92:66:4b:23:8c:16:e6:25:bd:
a8:d5:bc:f2:72:99:c2:ca:c2:43:51:dd:82:24:d1:
7a:98:ce:c2:15:4e:85:05:17:ee:9c:37:94:9f:c3:
87:d5:18:ba:a5:56:0e:77:94:58:cd:db:10:1a:64:
db:c1:11:27:97:62:22:2a:f4:b0:81:68:db:7b:cf:
b6:a2:cb:0d:ca:02:34:06:3e:fb:e1:21:4b:6a:d0:
a5:83:dc:ee:ed:ea:10:3d:90:54:46:d3:b1:e3:55:
73:52:13:a0:e6:d5:92:88:e8:01:fd:0b:2f:a5:5d:
99:59:3b:b3:1d:ca:d4:cf:20:bd:56:60:a7:ec:37:
08:7e:6c:27:6b:43:af:4c:0d:08:46:c8:fa:05:6e:
54:a1:8c:56:f1:84:93:2d:c3:61:32:b4:1e:1b:51:
9d:10:cc:64:cb:a8:02:f1:16:ad:e8:18:3f:c3:6f:
8b:0f:16:8e:61:e9:bb:c5:e8:10:b6:6e:29:75:c2:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:64:79:C6:73:E5:7E:A9:2F:F6:F0:1A:91:E2:F3:DB:AA:9B:64
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:4b:f1:a2:9a:63:d7:a1:b9:96:0c:e7:4b:5f:67:8e:6e:
50:36:9f:e6:78:bf:8d:15:68:6b:87:2b:91:36:13:15:f7:c0:
3c:4a:18:a7:cf:25:5a:72:b0:bb:8f:43:bf:1f:0c:81:aa:43:
47:e3:1b:32:65:84:5d:88:13:65:5b:00:74:a8:11:56:41:13:
6c:b1:2c:da:1c:d4:37:bf:2f:66:ca:a1:6c:f6:8d:d6:f4:e0:
6d:31:82:e3:24:89:31:cb:91:59:6a:c9:b9:85:2e:ad:63:65:
6d:58:8b:ba:fc:35:94:05:bc:61:d0:03:92:00:c2:62:5e:f4:
16:c3:68:6e:ff:c4:e0:12:47:50:f4:c1:2d:8e:22:5b:44:b0:
2d:3f:78:9d:b8:6b:92:7b:f0:1d:da:23:30:5c:10:83:c1:e1:
da:06:e6:00:68:4d:c7:75:16:a8:89:47:54:4c:88:95:50:a6:
f9:58:9c:e5:9b:d2:62:93:9f:0c:55:b4:b0:73:2b:e7:1b:55:
e0:14:88:7e:50:09:0a:85:68:a8:b0:01:7c:6a:bd:9c:4b:17:
18:89:54:7b:c0:7b:4d:17:94:f6:02:24:29:db:56:75:fc:b7:
bf:2a:94:f4:06:19:2d:b3:9a:04:f7:65:13:c4:f8:ec:fd:25:
ef:47:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:18 2025 by rpki-client