Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: srt0wLyjOXYXdvFWVNcLgiLUPtSXwVecpcbijE5IOao=
Subject key identifier: 64:38:5F:7B:6E:26:A8:53:EA:B7:0B:D8:37:D3:36:6A:BF:D2:DF:49
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0198D583F4DCB3309CE394B10046DC455E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 04FA
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: dHmexvUnyDjHrDphx163LAHrLJg4DL/F5hSCLxqEH8U=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f4:dc:b3:30:9c:e3:94:b1:00:46:dc:45:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=64385f7b6e26a853eab70bd837d3366abfd2df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:15:0b:ee:cd:7d:38:7b:01:38:9b:21:04:
c5:cd:d6:f3:30:8d:f1:dc:fb:19:5b:5b:9f:b0:f8:
dd:37:93:e8:d3:a8:7d:79:e4:18:19:88:5d:ce:52:
86:e5:63:1f:8b:35:ac:0c:cf:be:3c:df:ea:a8:48:
e9:9d:23:df:9b:53:1e:a1:f0:76:73:40:44:fd:c9:
29:cb:af:41:18:bb:ab:74:74:b4:1d:37:bd:f3:a1:
4e:24:41:b5:f7:eb:ed:7d:a1:5d:26:0f:66:aa:81:
59:c8:4e:73:eb:bb:85:fb:1d:7d:a2:33:dd:72:a4:
08:4e:e1:48:02:7f:c0:ea:a2:02:fa:fd:65:44:16:
c0:1d:0a:7a:1e:48:d3:52:55:67:06:50:e4:a6:b5:
11:c4:f3:74:aa:c4:7c:5f:9a:b4:a5:0b:24:eb:0a:
88:0f:5e:6d:91:4b:8f:60:3d:61:60:a6:5a:65:ef:
6d:c3:8d:77:4b:39:c9:2c:32:36:38:ac:d6:16:be:
a4:d5:d4:2b:5a:a2:1d:9d:60:7e:af:f8:18:e8:f9:
e5:94:62:cc:a6:29:4e:d0:4e:fe:e9:c4:fd:11:a6:
2c:93:27:03:85:10:1f:89:23:9a:11:40:01:2a:25:
f0:06:0e:c6:d8:57:af:ad:81:65:a8:79:bf:46:8e:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:5F:7B:6E:26:A8:53:EA:B7:0B:D8:37:D3:36:6A:BF:D2:DF:49
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3e:f1:37:a0:8f:ee:40:3b:50:23:f5:1f:f0:ed:7f:27:04:
ce:31:9e:72:d1:4c:36:f2:91:62:8f:80:5a:85:d1:b7:2f:21:
64:32:bf:41:ae:4b:62:5a:95:79:e1:48:38:19:fb:ee:ab:cb:
b5:72:51:d1:1a:ce:51:27:82:6b:33:e0:45:b2:26:7a:f5:3e:
f9:f9:5b:da:12:39:58:1d:5e:96:99:06:85:b2:fc:9f:22:91:
6f:9b:77:3e:3a:13:06:6b:38:19:f8:3e:40:dd:a3:94:a1:89:
9e:fd:06:aa:cf:a8:3d:d7:06:7d:d5:40:77:26:78:bf:fe:94:
5e:f6:13:3f:12:44:66:01:3f:d6:fc:dd:61:ba:cd:d6:cd:a2:
a5:5d:4e:d6:75:8f:6f:94:22:30:06:ef:33:3c:56:a8:1f:aa:
50:67:c7:49:4c:dd:b0:92:f7:d5:7b:a0:b8:a4:ca:34:33:fa:
d4:28:5c:fa:4a:91:00:ed:2f:30:f2:a2:48:8c:97:40:9e:88:
a9:d9:f3:03:4c:3a:bc:55:e2:97:ea:16:34:8a:18:0a:93:6b:
02:ac:c7:0e:b6:85:c4:22:25:3b:9c:3a:2d:15:f0:a3:83:e3:
71:b0:1e:04:98:03:e8:6e:73:34:59:ba:4d:6d:23:ca:95:dc:
5c:8f:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:55 2025 by rpki-client