Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: E3oBN+pMtl4v9d5pxI72wHceeZg0fHNpG7A452zL0IM=
Subject key identifier: 92:51:C5:06:DC:3B:BD:57:77:8A:A3:80:FF:9C:E8:A4:A1:4A:C2:CE
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0198D5838F4FE0F5A1AFF9DC6F8049BE70CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0B03
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
2: Eb67nR4_r4j8Qlyfns20ti-cJT8.roa (hash: lFVr25uX8drF2iD9dDrV81ECiahOTdUT7rmBW8WFEjc=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: s24bUVU3G3fv47CxfozonQUAXz0K6YASjpaYFQTNlY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8f:4f:e0:f5:a1:af:f9:dc:6f:80:49:be:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=9251c506dc3bbd57778aa380ff9ce8a4a14ac2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:bf:4a:bc:31:cc:ac:ba:9c:e3:e2:0d:31:
43:d2:b0:de:c4:9e:4e:67:2f:c8:d6:90:8d:c4:ce:
41:d5:b0:09:65:08:0d:9d:2c:d1:f0:be:8e:37:0c:
e0:26:ae:3c:89:3f:87:51:74:de:71:1c:f2:32:a1:
ad:b9:20:8b:b8:ac:5e:48:4e:0c:f6:38:f1:1a:0a:
04:b8:db:65:e0:4a:98:a5:87:05:10:8e:f7:8c:7c:
88:b0:45:9a:3c:81:a5:0a:63:20:41:14:75:39:19:
dc:22:3a:db:1b:8c:b8:82:73:42:8b:06:1b:2f:87:
b8:e8:75:27:5e:e5:f6:b7:32:84:63:e1:f4:24:f2:
88:78:47:79:22:d6:16:b8:5f:8e:98:92:07:88:6b:
bc:3f:a5:11:12:45:15:cb:54:72:7a:6f:2a:e7:e0:
bb:b9:f6:7b:f4:46:66:56:06:61:24:49:a2:e4:e8:
6e:85:e3:5a:20:cb:46:18:a6:d8:22:6e:f8:ba:57:
d1:06:3b:1d:71:be:1e:60:13:45:8d:9b:da:72:a5:
94:d1:76:79:c8:41:d9:79:99:0b:f0:25:54:aa:88:
8f:34:61:d1:0d:5e:28:3a:f7:d9:64:18:01:d8:47:
8a:5b:76:ed:f4:03:f9:87:0f:d3:45:3c:24:3b:36:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:C5:06:DC:3B:BD:57:77:8A:A3:80:FF:9C:E8:A4:A1:4A:C2:CE
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:28:2e:2e:dd:d8:f4:17:d6:4f:75:41:af:b8:96:1b:0e:
38:4c:fc:b2:30:75:06:75:7a:39:52:5c:4e:45:29:0d:73:f6:
01:6e:30:a2:fe:ac:9c:47:4d:9f:ab:48:b0:3f:1d:83:b6:72:
d0:75:3b:da:07:eb:59:be:ba:86:8d:1a:88:30:9b:b5:2f:44:
ea:c6:ec:0e:9d:3d:a3:61:3b:5f:04:4e:ab:87:9d:97:4c:8d:
ca:b6:6a:05:b0:5b:34:d6:26:9a:c1:02:8a:d9:c2:67:95:7e:
84:be:6e:d9:54:b4:a8:d5:d3:fa:ab:3b:1a:47:83:e0:4f:e7:
b8:34:de:a9:d4:55:08:0e:42:d4:ed:b6:0d:70:5a:c4:83:c7:
69:6d:87:9b:3e:53:a8:04:f5:34:9d:2e:ca:6c:f4:ce:ff:a9:
8e:25:02:ac:d4:a3:90:d1:99:d4:25:8b:fd:b1:29:8e:3e:23:
57:35:20:e2:4e:55:96:7b:30:d9:67:88:5e:49:29:0f:4a:57:
ee:b0:f6:f1:f0:41:01:2f:0e:2c:fc:1a:8e:1f:ec:27:27:84:
6b:3a:10:47:8d:60:db:c5:f9:bf:57:21:cc:25:27:30:e2:2f:
f1:4a:8d:34:45:f7:97:64:7d:af:2a:d7:6c:1b:5b:2d:93:91:
3c:ca:eb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client