Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: vboq8m6TBMyVxakdL/aCmJVpZ2MhKDqVBspU23crMaU=
Subject key identifier: B4:7A:B8:1A:47:99:3B:F7:64:77:01:64:89:F8:FB:76:04:AD:AA:2E
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 0198D705D5A190FCAA0B122970B7207F088A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 13:02:20 +0000
Manifest this update: Sat 23 Aug 2025 13:02:20 +0000
Manifest next update: Sun 24 Aug 2025 13:02:20 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: vhXY+a7+Uch8Ijs23pOmReszJin256VpR+HnnR6uPok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d5:a1:90:fc:aa:0b:12:29:70:b7:20:7f:08:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Aug 23 13:02:20 2025 GMT
Not After : Aug 24 13:02:20 2025 GMT
Subject: CN=b47ab81a47993bf76477016489f8fb7604adaa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:40:98:68:9b:64:e4:11:c2:34:33:99:ff:
19:af:0a:af:b2:b8:0b:b1:f8:0f:a3:4d:c6:0c:2d:
23:62:c1:e6:88:c1:3f:28:a8:3c:63:00:43:97:34:
53:51:30:79:33:16:59:12:02:8d:86:21:a5:81:7e:
5a:17:02:f2:69:de:72:78:eb:0f:09:28:63:aa:d6:
25:17:47:d5:e7:c6:0e:4e:28:e0:26:1c:f1:40:11:
86:1e:68:d4:d5:bb:13:e6:81:d7:ab:63:c7:07:07:
6f:d8:1a:e2:bf:47:33:42:e3:6b:0b:bd:28:02:9b:
3f:08:50:0b:2f:25:56:c7:53:00:b4:22:13:c1:80:
c9:10:28:88:ee:41:b7:9b:28:2e:ce:eb:d9:ee:1f:
9a:60:da:32:db:c0:7e:72:61:f6:50:67:2d:e0:81:
be:23:2c:f0:ac:55:e6:eb:82:80:e5:05:36:3a:2b:
24:8b:36:9b:6e:d6:53:c6:33:1c:24:ef:35:0a:cf:
02:f8:9f:05:4e:0e:ce:49:f4:90:55:b3:05:3b:b6:
79:d4:ef:93:4e:cb:3a:dd:95:38:a5:45:0e:b2:7a:
e3:ef:62:0c:36:f1:9c:9c:33:77:13:41:96:65:fb:
dd:94:e2:64:be:04:4d:31:ca:a5:20:7e:9e:4a:3d:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:B8:1A:47:99:3B:F7:64:77:01:64:89:F8:FB:76:04:AD:AA:2E
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:af:85:45:05:cd:30:d0:13:b7:70:44:e5:56:97:be:dc:
86:10:2e:4e:5d:e4:43:2a:9f:d5:51:de:3d:f7:fd:82:52:0a:
92:19:76:dd:27:20:f6:bd:59:37:ac:5f:2c:e0:8c:eb:55:d0:
46:29:ae:a7:ed:64:78:be:27:f6:04:a6:2e:61:ff:07:b4:fd:
a9:0b:96:5d:1c:25:39:46:6d:fe:cf:aa:31:2b:0f:6b:e1:92:
b8:5d:e5:32:e1:fe:f1:d3:45:3f:15:40:f6:b5:10:d0:02:7e:
70:e7:de:77:c2:5e:cb:8e:04:58:a2:c5:8a:f9:6e:d3:87:f6:
bb:cc:05:da:b4:12:94:cf:5e:4f:31:da:20:28:9c:d8:5e:37:
26:d6:ec:a4:15:4b:dd:8d:a0:ca:86:31:75:37:0c:e4:01:ec:
5f:46:04:02:4c:b0:30:7e:2b:1d:2f:8e:17:00:7f:c4:cd:03:
43:05:47:27:cb:e7:f9:3d:60:4a:3d:43:66:5a:e6:f0:aa:7d:
e4:24:20:b4:a1:67:e7:28:c5:43:0a:92:f8:e2:19:22:44:22:
c5:7b:9b:74:49:ab:87:ef:79:8c:93:f3:cb:01:1f:c2:82:c4:
06:c5:f4:31:d1:bf:d9:ad:93:ce:47:16:a0:ce:34:2c:de:73:
c3:11:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:24 2025 by rpki-client