Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: NydhsHlb+rnRI93Dmty9rc0BlLOWWGmO2lDt8frek1U=
Subject key identifier: 01:ED:FF:BF:1E:1B:84:1B:CF:22:7C:DF:1B:68:BA:F1:8B:4C:38:42
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0198D4E00EBCF83C5E3E0541BE5ED1BAABB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: cm69jktFRApjzYpbBFWYZf03f7t8opdVMPNF5DJPch4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0e:bc:f8:3c:5e:3e:05:41:be:5e:d1:ba:ab:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=01edffbf1e1b841bcf227cdf1b68baf18b4c3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:35:cc:de:59:d6:28:e0:6b:d8:2d:08:f6:
9a:43:e9:75:b7:ec:c8:45:fa:7d:71:34:83:dc:e0:
fa:48:45:a4:fb:31:d6:8e:01:9a:f7:75:d6:d9:e7:
2f:79:3b:83:c2:ba:79:c8:65:b2:69:ff:df:0a:0d:
15:51:87:a7:77:75:5c:72:77:cf:e9:07:94:95:90:
5e:48:9a:73:aa:51:56:a3:41:fc:68:54:b1:cd:ea:
c3:9b:cd:d2:d4:47:48:06:bb:69:b4:44:93:c5:40:
2f:dc:8c:36:a2:b3:d4:56:91:2b:3e:8f:3a:3b:bf:
4e:e1:d1:6e:6f:3e:a1:22:3c:05:bd:a2:7b:68:0a:
be:da:f2:ce:2f:55:e2:5a:33:0a:a2:6a:ec:34:45:
65:64:f5:08:12:20:90:a1:36:76:39:37:be:74:52:
ff:ab:cf:0c:25:e9:f8:e2:a6:87:4a:0d:5f:3f:c8:
e4:f4:dc:58:82:60:2b:91:5e:4e:37:ac:b3:cc:6b:
4e:a5:39:97:ec:5e:cd:50:ce:43:ce:e8:d7:c1:fd:
38:47:6f:98:76:d0:b0:c6:78:92:de:95:56:58:a2:
13:f4:a1:7c:68:45:dd:75:47:aa:ce:81:97:3a:a7:
a7:a6:14:d8:36:3f:47:da:a6:4b:bb:0d:09:9b:f5:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:ED:FF:BF:1E:1B:84:1B:CF:22:7C:DF:1B:68:BA:F1:8B:4C:38:42
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:28:d7:99:50:70:8d:84:1d:bf:39:fb:6d:6b:39:ff:03:f0:
fa:75:79:8e:78:a2:58:0d:e2:fe:09:dd:12:7b:50:b7:46:10:
42:78:18:cd:b9:e5:61:ec:32:ee:0b:09:ba:3d:8a:f2:4c:7d:
dc:50:d2:f7:90:de:ab:fc:f8:4a:d8:34:13:44:d5:9a:8f:4d:
67:93:c5:2c:72:f4:70:39:4f:8f:0f:ac:2a:c8:09:9e:c9:81:
dc:25:a9:e5:38:4b:06:fc:d6:12:d7:d2:f0:b7:26:83:f2:22:
43:30:63:58:46:44:ea:a6:22:a5:23:5a:57:fc:c9:1c:46:e9:
77:46:5b:19:ab:ba:17:96:12:65:16:ba:03:ae:26:d9:90:22:
b6:8e:96:c1:6e:11:8a:80:5a:1f:18:4a:6b:0e:d9:10:52:65:
b8:6f:86:3f:2e:ae:d1:70:6d:e5:b2:cb:4a:3f:af:6b:b0:c4:
99:62:b2:ae:30:21:6b:85:f3:7f:42:d0:8a:13:9a:05:75:b5:
f2:e8:d1:a6:8c:2d:17:55:0a:e8:67:9c:76:d0:94:73:99:5f:
7d:0c:fe:44:48:39:34:b1:8d:0f:27:94:b9:15:e8:0c:cb:da:
d2:a7:39:f4:7b:ce:e9:6f:53:d0:74:80:84:44:ed:a9:33:52:
51:a6:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:32 2025 by rpki-client