Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: 2BpH6d4WHaRyZewTKbCHpXllMt/QRAZItBOa8RLPVkM=
Subject key identifier: 80:7F:50:B9:54:55:73:63:E6:CE:D7:C4:19:CF:87:29:5A:F9:7E:D4
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0198D51594293DD5154447A6751CE6DB5728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0681
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: BjHDaL+udobCLwZJJyTWTauf/tLA0TCZkNc7ApT806E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:94:29:3d:d5:15:44:47:a6:75:1c:e6:db:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=807f50b954557363e6ced7c419cf87295af97ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:30:1f:d0:88:62:7d:4d:00:2f:0f:55:d7:
4e:cb:76:18:65:ea:b3:09:9a:aa:1b:33:58:e3:31:
71:85:da:5f:20:83:ef:e2:2c:27:1f:5e:9b:ae:35:
2a:af:57:74:e5:4a:56:df:f1:0c:65:b3:0d:85:f5:
98:f4:98:4a:b0:09:68:fe:25:6a:27:38:94:57:18:
a0:c1:3c:0c:22:26:28:60:25:42:98:4c:97:e1:8d:
a0:42:ca:eb:76:3e:c4:3a:fd:77:d5:7e:ee:b8:30:
3e:d3:38:52:9e:93:b5:e0:2e:ab:c2:5b:fe:d2:93:
87:31:d1:8e:e6:3a:3d:05:c2:ac:5d:7a:ed:eb:b0:
56:2d:32:f9:ce:e5:d0:68:c3:c5:9e:23:cd:12:70:
78:45:f9:23:cd:f8:d0:1e:80:de:73:ed:21:fe:d4:
67:41:02:de:5e:cb:b4:2a:e2:fe:f1:e5:df:87:d2:
da:87:16:b1:bd:86:91:b8:41:c6:3a:2d:5d:74:a5:
c6:c7:a7:1f:40:d6:6d:75:de:fe:40:4f:49:3e:f7:
db:2d:b6:77:f1:c2:a8:c7:cb:b7:6e:df:8a:bc:e2:
57:1b:22:a7:7f:62:ef:5c:47:63:18:4f:fc:7d:20:
1c:29:83:8e:19:17:17:a9:6e:a7:fc:c0:e9:3a:de:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:50:B9:54:55:73:63:E6:CE:D7:C4:19:CF:87:29:5A:F9:7E:D4
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:81:99:82:f8:1c:25:0d:d6:9d:17:e1:8c:fb:13:e2:65:a3:
c8:a2:7f:cd:03:90:02:4d:9d:3f:26:1b:5b:ad:13:43:24:6c:
2b:db:ba:1a:d6:87:d0:72:d8:c7:33:85:b7:5b:13:78:2f:88:
b0:95:23:56:af:38:47:57:cb:c5:13:fc:3c:e3:2c:0f:df:66:
03:01:6d:48:40:57:06:be:bd:8b:b5:24:84:f0:85:e4:09:2b:
41:54:12:13:0c:86:e2:69:f3:b9:50:0b:b4:3d:4f:d5:e3:8d:
8c:6a:eb:cf:13:e6:e7:c5:23:33:99:e9:39:e5:28:bb:a0:27:
b0:09:c6:70:45:ac:ea:93:ff:df:ff:c9:2e:93:36:0c:59:2f:
8b:b9:47:1c:eb:7b:7a:df:0d:52:8d:5e:ef:70:6e:85:4d:a2:
b6:9c:74:cd:b3:78:23:24:09:ad:eb:91:83:0b:4e:f9:b0:51:
c7:ad:2f:89:7a:85:9e:da:68:40:77:8f:f1:0b:ea:76:c9:50:
9f:d3:eb:13:df:41:d1:a9:67:05:80:f2:a5:2e:dc:69:3d:27:
be:e4:e4:44:36:b5:3f:99:01:2b:e9:04:37:4d:3d:da:58:28:
f4:7d:fa:f0:53:44:bb:27:d1:70:d5:f1:14:6b:6e:02:fd:1d:
28:56:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:16 2025 by rpki-client