Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: nVhDxCoykBT7C6QgstDAdwLDPxJLkxFitOi9jG6Atsw=
Subject key identifier: C0:55:F8:AE:22:A7:9E:5F:8C:48:7A:4E:63:88:61:3B:4D:BA:3B:91
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 0198D4A807682DBF276B69B48C63AFCF74C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: XvCKijmO0a3+ZCwAPY0DQna1+Nn2S3Y04O/+OhHS2B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:68:2d:bf:27:6b:69:b4:8c:63:af:cf:74:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=c055f8ae22a79e5f8c487a4e6388613b4dba3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:85:94:59:9a:59:74:29:7a:80:7a:92:84:
8b:83:49:0e:75:b8:8a:0c:77:2d:6a:f9:6b:57:24:
68:33:bb:7a:1e:01:0c:29:9f:ab:ff:50:c7:8e:0c:
1a:58:9e:49:d6:0e:65:7d:2b:6d:b6:54:a0:cd:2f:
c8:9b:18:1f:93:e9:b1:a6:3c:c5:8c:03:f8:fc:78:
60:33:a8:70:ae:8e:37:6f:05:0e:93:86:45:c0:e1:
0a:18:b7:22:94:30:b7:e3:2a:ec:90:0d:82:4b:3a:
59:9c:9c:3f:1c:01:21:de:9e:20:bd:e4:47:27:3b:
79:17:a5:31:d3:d7:65:fe:4d:39:3c:04:da:8f:ef:
e7:92:9c:bb:6d:a7:b6:95:e6:6a:da:66:5a:11:b8:
1a:e6:57:7b:86:70:f1:3a:84:40:6a:be:c9:e5:ff:
82:90:c9:f2:fa:98:b0:e8:ed:05:96:57:74:90:7d:
31:35:9c:6d:95:d1:0e:83:2b:31:81:3f:d4:a6:c3:
5e:fc:72:d0:a7:6c:31:7b:29:2c:3b:df:01:e3:95:
f9:76:a1:ca:e1:91:1d:0b:db:24:28:29:cc:78:cd:
ec:71:3d:9c:af:7c:bd:fa:45:f0:f0:5d:11:5a:97:
9f:d2:00:9c:e3:97:bb:2e:e4:58:0e:77:7e:71:0f:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:F8:AE:22:A7:9E:5F:8C:48:7A:4E:63:88:61:3B:4D:BA:3B:91
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:98:6d:d3:c6:3f:d7:79:ae:d9:87:f7:5d:16:4c:22:89:6e:
a7:1d:0c:96:5f:bc:67:d4:86:57:2a:09:85:00:50:95:e0:01:
54:53:16:12:05:3b:5d:40:54:83:aa:f5:1e:20:2d:33:71:e1:
14:de:a5:c1:03:d3:00:d8:f9:97:a5:c3:54:03:66:fb:86:5c:
83:50:4b:1e:65:93:e2:b7:23:62:19:b7:93:38:94:3b:a1:ef:
0e:92:e1:fb:59:80:f2:09:86:38:b9:c0:a1:2b:21:e9:4c:c2:
fc:37:03:92:ea:72:1d:bb:d9:5d:76:e6:52:7d:f0:b8:30:6d:
e9:27:a1:0b:3d:35:f1:81:c0:0b:e6:99:3d:3d:bc:5d:80:10:
7f:f7:4b:0f:99:4e:7c:e6:30:9a:20:09:d5:e2:d0:72:46:ec:
5a:a0:99:a9:52:5b:08:be:a7:28:8e:c0:7b:16:01:ec:da:99:
07:76:7b:9e:f6:02:19:53:51:e6:fd:a6:82:29:3a:14:c6:b0:
ef:04:0b:05:e0:20:ef:2e:34:5e:dd:a0:a6:6e:b1:9d:ec:45:
b2:7d:a8:01:03:4a:48:2c:90:18:fa:0d:92:ca:cf:fc:89:df:
10:93:d7:2b:c7:75:97:b4:2f:1d:a0:b0:ab:0a:5d:8e:30:ca:
b2:88:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:50 2025 by rpki-client