Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: rER4W3Ve8c2k2SWObQ0gIS7HE7FMLNC0h4/EmxT/P5U=
Subject key identifier: 0B:BB:72:38:D8:FC:EE:2D:11:45:5C:74:1D:E1:36:2C:48:C4:C9:07
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 0198D660955ECAAA336677EAB90301926C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1366
Signing time: Sat 23 Aug 2025 10:01:50 +0000
Manifest this update: Sat 23 Aug 2025 10:01:50 +0000
Manifest next update: Sun 24 Aug 2025 10:01:50 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 1d5QJQoTsdScXzv69UOD8Y7OSRzix+JaBvoKbbkQg+0=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:95:5e:ca:aa:33:66:77:ea:b9:03:01:92:6c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Aug 23 10:01:50 2025 GMT
Not After : Aug 24 10:01:50 2025 GMT
Subject: CN=0bbb7238d8fcee2d11455c741de1362c48c4c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:15:ea:8b:d9:9b:2f:87:db:dd:6d:e7:0c:
ce:44:0d:41:fe:03:54:37:5b:4f:4b:f0:4b:3e:06:
e1:84:a2:e8:b9:ef:58:d6:84:0a:25:d0:96:b9:5f:
0c:1e:9f:46:b6:df:3e:6e:cb:c5:73:00:55:7c:16:
3e:f3:d1:8a:0f:11:7b:93:47:a8:82:fa:ee:75:ad:
b6:bc:a8:8e:b6:61:41:b8:03:16:fe:24:5f:de:dd:
ee:e3:c4:5b:a2:97:c8:3a:ec:17:fa:4b:82:7f:96:
18:0f:1a:f8:3d:af:55:ef:43:c5:63:fc:e0:6b:e4:
11:a0:7d:e4:41:11:a3:78:0e:e3:f1:cc:55:3d:2c:
3a:3f:5d:47:80:9a:43:48:4a:af:d2:35:e2:2c:c6:
a2:81:a0:08:24:27:cf:ab:81:63:17:0e:53:e0:89:
a5:cc:7a:f4:1e:5b:58:f9:9c:bd:f8:a6:6c:bc:45:
59:6b:ff:71:8c:f8:87:c3:6e:31:f9:82:f1:dd:18:
02:49:af:10:90:3f:bc:a6:49:fe:8a:41:73:31:31:
f7:fb:a4:d4:10:0d:3e:99:ff:f5:24:76:82:a0:5e:
cb:0d:e1:26:47:30:82:ae:21:34:1d:a2:23:df:83:
89:b6:23:a9:fc:f0:58:1b:ea:fd:51:5f:8d:85:fb:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:72:38:D8:FC:EE:2D:11:45:5C:74:1D:E1:36:2C:48:C4:C9:07
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bd:61:2f:9b:cd:4d:59:7b:5b:95:19:44:f0:61:61:35:09:
fe:f9:70:e6:55:4a:8f:8f:88:6e:e0:50:36:b0:bb:75:76:99:
99:19:e1:a7:37:50:98:9e:ce:a4:bc:78:e5:01:5c:9f:e5:99:
65:12:1a:c7:44:7f:a5:36:43:06:c0:3f:7c:f0:25:26:9f:bd:
45:c6:fd:2d:ce:51:0c:a3:e9:46:80:b9:ef:95:f0:03:65:f7:
23:4f:b9:00:3c:d9:74:c7:d3:91:5a:41:9f:f0:8a:ec:4c:89:
d6:ee:e9:09:99:17:2f:24:28:35:f5:31:28:63:58:09:d5:46:
ce:66:3b:d6:83:8d:52:26:45:9f:18:3e:53:fd:35:2f:59:59:
bb:26:89:c1:cb:2b:bc:78:a0:63:bd:7c:c2:e6:06:74:de:9f:
b1:8b:04:50:1e:1a:7d:eb:5c:50:cf:e4:f0:53:2a:92:34:e1:
5a:a3:4a:57:22:5f:e7:ed:7c:0b:3b:0a:9f:3a:24:69:80:2c:
77:04:2f:a4:bd:cd:1f:87:27:7a:f9:6c:21:7d:00:54:2e:f2:
ed:29:48:3c:15:66:76:4c:fd:89:b3:16:6a:2e:39:fc:9e:41:
1b:a5:5d:4e:36:8a:0d:1a:fd:aa:1e:d7:35:02:8c:01:26:af:
94:38:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:21 2025 by rpki-client