Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: 75UAefDbaI7oKI0245wWFm7rnULMA6LOynNdTMlBfJw=
Subject key identifier: D9:0E:30:48:64:34:67:BD:77:C0:B0:38:1B:11:24:F2:13:43:EF:5A
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 0198D583AAC7BF8B1DD2D4B7895D952A171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: ihz/yaUxVcEY1yEuZ5OD5G4kzHt1LUAEwVeUVMEtCv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:aa:c7:bf:8b:1d:d2:d4:b7:89:5d:95:2a:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=d90e3048643467bd77c0b0381b1124f21343ef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:5c:63:bb:04:2a:e1:19:1f:5d:55:98:f2:
49:86:f1:04:a8:6f:24:e2:3f:46:f2:a3:ee:10:b5:
86:78:bf:0c:38:66:45:71:58:7c:dd:ea:70:cd:c3:
ff:4f:87:94:16:cc:28:4a:71:99:09:af:b5:80:16:
64:e2:45:58:85:bc:e1:53:2f:39:d1:9e:1f:5e:e1:
09:54:e2:de:1f:d3:36:5a:9c:11:a0:1b:e1:e6:a8:
e2:45:83:71:ba:84:4c:07:a0:3e:de:0e:2c:50:44:
c3:e3:c2:13:cd:c8:ee:f3:81:a1:f2:f2:3a:c0:01:
5f:31:3c:99:02:7f:9d:36:8b:4f:35:03:33:d9:88:
c7:36:10:ae:21:01:b7:a9:d6:ac:0a:14:e2:d9:b8:
d2:5f:2e:76:ff:46:96:70:3e:12:d3:8d:bb:14:eb:
10:77:97:2f:36:bf:4e:30:36:eb:a3:40:22:42:d2:
5e:24:e6:22:23:0e:2e:d9:2f:e8:25:51:78:8b:fa:
37:39:96:87:77:27:48:2b:fc:c8:e8:50:2b:42:4b:
74:fc:10:42:c6:36:41:9e:93:4f:b5:91:ae:2d:a8:
32:03:74:db:8e:5b:a3:e9:bd:2c:73:fe:4c:cf:8d:
71:2b:56:26:5b:98:7c:8c:5f:56:a1:f3:a1:c2:32:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:30:48:64:34:67:BD:77:C0:B0:38:1B:11:24:F2:13:43:EF:5A
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:9b:58:07:c4:9d:a2:35:92:20:b0:7b:b1:51:9a:83:8e:
7c:1a:aa:cb:cd:29:76:5c:5f:6f:d0:ab:f7:7c:19:f8:9f:b5:
37:9d:42:a1:42:94:ed:a6:d2:95:71:79:d2:62:65:dc:59:21:
6b:7d:ac:f1:af:e4:32:cf:68:59:e3:a1:51:65:b4:e6:06:66:
69:2a:41:99:1e:9a:f6:ce:7b:65:ac:69:40:f9:ce:0e:ac:e0:
b0:b6:53:f4:ff:bc:52:85:fe:17:59:d6:84:cd:84:93:69:20:
2f:5b:50:e6:c3:6a:a6:81:d7:54:6c:cc:6c:5f:3b:9c:a1:0b:
bb:03:60:e2:1a:03:f7:4c:f3:ef:de:29:77:6c:a5:e7:a1:da:
32:a9:ce:56:33:0c:15:e4:45:4d:38:24:58:d0:40:fb:49:ba:
b3:97:80:ab:3d:94:23:ea:2c:a0:6e:f4:9c:e0:35:c8:33:ee:
32:86:92:e3:82:65:52:e2:43:af:cc:b8:eb:19:dc:05:7a:9b:
c4:26:9c:ff:f7:ae:2b:9f:1c:f4:37:d7:27:ed:5d:3d:68:2d:
f8:31:6d:10:f6:b8:98:a1:1d:15:2f:4d:31:3d:99:c7:54:42:
32:6a:b4:e5:dd:81:41:fd:34:cd:10:16:b3:38:15:d9:94:21:
aa:88:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:35 2025 by rpki-client