Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: sa7rQpL3ZMfB68N/jRKrvi7RlM3lqftZ1drTRV3neUQ=
Subject key identifier: CD:F0:87:BB:0A:B0:1F:DF:B4:E3:22:DC:AF:8F:09:E5:0C:AB:2D:93
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0198D5836ECDBE4871319B1C954D708B61E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0431
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: yrv9APdD+K/gHiwRwo2kmqVBoS7mqA41fb/IdKz+R6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6e:cd:be:48:71:31:9b:1c:95:4d:70:8b:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=cdf087bb0ab01fdfb4e322dcaf8f09e50cab2d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:63:04:80:69:d9:56:4d:49:b3:02:65:e6:
fd:36:f4:dd:08:8c:e1:98:36:49:7b:b6:50:37:50:
3f:27:82:80:5f:4b:56:9c:ff:8a:2a:e2:ce:f3:71:
e5:76:40:f2:3e:30:e3:d8:3d:78:a9:2a:21:47:3c:
f6:2a:9f:c0:7b:13:24:f3:89:18:0b:26:ab:c0:5b:
f1:e0:e6:52:84:d5:72:93:17:2e:87:f5:51:b4:b5:
b5:bd:93:18:06:87:54:65:93:35:8a:a1:75:5b:c0:
8d:6b:66:4d:a0:e3:27:fd:4b:d6:da:d7:68:47:01:
32:73:d1:04:ef:fb:86:d0:bb:1f:5f:18:94:d1:cf:
bb:9c:1f:78:a2:ed:9c:27:e0:7f:6e:0b:31:9c:60:
f2:fd:5f:74:b2:ca:12:73:2c:79:26:8a:1b:e4:e7:
5a:7b:64:35:a1:7c:2f:c3:a2:d8:fb:58:f2:51:67:
3a:5c:05:13:8b:76:6e:70:ef:c0:77:a8:82:f6:0a:
e7:1a:a5:72:a2:d3:d8:2f:3a:2e:fe:d7:c7:ae:cd:
aa:c5:4a:56:1d:2d:f9:67:74:17:16:9f:3f:31:5a:
eb:8b:27:84:ae:b8:56:cb:dd:da:16:a2:9a:d2:11:
8b:5b:51:57:0c:ec:90:1d:87:4d:58:b5:c1:1e:e6:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:87:BB:0A:B0:1F:DF:B4:E3:22:DC:AF:8F:09:E5:0C:AB:2D:93
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:71:c4:0a:91:53:b0:e2:0d:bf:e1:88:f8:92:47:c2:b7:68:
bc:a7:99:36:e4:7d:56:76:b6:fb:77:9d:17:bc:56:bf:a7:7b:
38:d9:9a:67:73:89:5e:0f:d8:6f:18:dd:35:48:a4:1e:ef:a2:
f5:85:20:e9:34:0a:b3:17:34:db:37:bb:cc:91:12:29:a2:03:
e8:f3:72:60:f2:eb:c7:43:e2:cc:f0:25:96:59:6e:92:e4:6c:
c0:44:c9:e6:71:0e:bc:3e:04:a5:08:26:66:ef:3d:d3:22:86:
5f:55:bb:a6:2d:2b:24:a0:e9:b1:ed:72:3d:0a:4a:ce:a7:99:
f7:f8:cf:d7:90:55:8b:68:16:47:ea:94:0a:fb:4c:d8:3b:9e:
5e:5e:45:ec:5a:b5:d0:1f:ae:41:da:ac:25:2e:77:7f:64:21:
7a:bb:e8:29:75:c9:5a:dc:aa:01:87:fe:51:84:08:8e:c8:bf:
47:81:51:ba:7b:05:ab:cd:92:5a:ee:50:9f:62:74:ac:09:37:
1c:83:e4:f9:c1:fd:71:92:0a:13:2d:a9:25:1b:84:a5:bc:33:
2b:4b:f8:80:22:b5:31:82:f5:e9:04:6a:13:e9:4d:a8:31:5c:
7c:f3:da:13:7e:8b:3c:13:cd:2c:59:c8:26:12:8a:b4:17:07:
32:c5:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:44 2025 by rpki-client