Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: 9q7WGeDKq9Jy4qBYfXL2Agojev/K6KAh+ZiL8nejQiA=
Subject key identifier: 2A:D8:06:70:2E:42:F5:B4:AF:9A:51:76:2E:70:2A:EB:7D:A1:5B:1B
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0198D4E0D84E4F353AED500536313ED40017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 12F0
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: 0qOX05DGmgbHqf0z9cWLpec6Le19JZdITsDu6vuQRHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d8:4e:4f:35:3a:ed:50:05:36:31:3e:d4:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=2ad806702e42f5b4af9a51762e702aeb7da15b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:a2:8e:56:b3:90:c5:14:6c:a3:b3:fd:c4:
65:98:eb:7c:52:44:56:9c:a2:ec:7e:a8:10:67:dd:
a4:a5:9a:e3:b3:d3:c9:8e:56:e7:88:f1:10:f9:6e:
bd:34:c2:2b:8a:49:6a:2c:01:b5:9f:65:ab:b8:f1:
5f:e4:66:f4:0f:67:a4:68:bf:c9:f8:32:27:f2:74:
65:5b:31:2a:fe:82:37:b3:e0:cf:2d:e6:3a:af:da:
b5:5d:0a:af:68:f0:b6:cb:02:67:ae:de:7f:08:e5:
a9:82:87:41:a8:7c:d4:49:da:1a:d6:0f:19:2e:25:
c1:e6:ac:9f:ab:0b:3e:96:67:04:d5:37:e7:05:b9:
87:21:6e:1d:cc:80:57:54:29:de:ba:6d:61:d1:ea:
19:b7:b0:62:0e:0b:40:2a:76:d8:42:1d:6a:fd:f5:
b7:a4:0d:94:03:5c:67:6d:27:a3:c5:63:f7:ab:55:
99:3a:ef:95:0d:2a:f9:b6:b0:46:24:5c:10:e7:c6:
c7:8d:c9:46:59:11:88:ef:87:ef:7a:f0:07:df:d3:
d5:9f:b1:14:30:7c:7f:88:1b:e2:a5:a4:29:a6:f5:
a6:9b:02:c8:a7:d0:90:b1:41:51:b5:54:54:6c:24:
fc:83:ac:c1:79:99:90:78:9a:da:e6:d7:0d:83:a2:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:06:70:2E:42:F5:B4:AF:9A:51:76:2E:70:2A:EB:7D:A1:5B:1B
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:e8:09:f3:5d:e2:06:d3:6c:2b:54:b3:f0:af:2b:80:85:
3c:01:36:7a:00:2e:e5:99:54:c3:e6:f6:f1:eb:5a:51:0c:c9:
bf:d6:03:dd:d0:ad:5d:1e:69:a3:97:7e:d4:af:c6:e8:e4:a8:
2e:70:c3:61:11:90:31:db:b0:49:7d:dc:e5:fe:22:3c:e1:01:
fa:f1:fe:04:43:a3:ac:64:52:91:45:48:86:6a:92:3e:53:59:
1a:7f:7f:84:bb:18:ac:0b:18:a8:e7:66:42:9f:53:20:dc:44:
82:73:9a:80:52:10:e1:ac:32:85:1f:90:a1:6e:fc:ee:98:f9:
59:5c:8e:fc:9f:44:0c:17:ef:36:13:3d:01:6a:d7:34:a9:c0:
54:34:d7:01:05:bc:f0:29:4b:77:7b:da:ef:2a:1a:8b:d9:be:
86:0b:71:0d:78:24:87:a0:b3:95:38:b1:53:57:2b:e9:ec:de:
5c:6d:8a:d2:06:f8:e2:2c:8c:8b:8b:03:90:7b:ab:d1:19:be:
95:14:86:eb:7d:45:87:c7:81:05:3b:34:c9:48:bf:5d:c0:23:
fb:40:a3:e9:0b:d0:a3:91:78:04:f0:cd:bb:13:b3:3e:f3:33:
3b:24:f8:36:4b:9d:a7:37:b7:7a:61:a6:30:60:ff:45:d9:7f:
9b:a3:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:14 2025 by rpki-client