Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: +JsAU1n77zGadfZhCV3JGjJpNs0nRViJAMtuFf+TzNw=
Subject key identifier: 22:12:8F:46:06:9F:1E:FD:F8:81:D5:D0:47:68:AB:53:B8:0E:C8:68
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 0198DA3C787815184E7B2AD08F828F12F518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0CAA
Signing time: Sun 24 Aug 2025 04:00:52 +0000
Manifest this update: Sun 24 Aug 2025 04:00:52 +0000
Manifest next update: Mon 25 Aug 2025 04:00:52 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: ETxLtYiCIGcng0UWb+UMyxkRc+//Qefrs1ukWoc8sIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:3c:78:78:15:18:4e:7b:2a:d0:8f:82:8f:12:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Aug 24 04:00:52 2025 GMT
Not After : Aug 25 04:00:52 2025 GMT
Subject: CN=22128f46069f1efdf881d5d04768ab53b80ec868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:88:9d:d2:e8:a2:f2:48:cb:da:41:d2:bf:
06:54:8c:f8:77:b7:b9:4d:8b:05:62:e9:33:fd:b3:
eb:a8:89:87:e1:9d:8f:5a:03:e0:90:6d:ec:72:65:
df:c6:66:cd:3c:97:96:e8:a7:af:03:0e:a4:42:df:
b0:aa:83:7a:d1:75:6a:ea:3b:41:f8:eb:ac:d3:9f:
7d:2e:17:23:6b:01:0f:03:23:ed:fa:96:e5:d1:72:
25:91:e2:ca:70:45:c7:86:bd:e8:40:8a:30:9a:2a:
12:67:c2:b9:7a:6c:4e:57:6b:13:d6:02:41:0b:a2:
1f:e0:d3:1f:8c:c6:37:16:1e:b1:58:ff:27:14:dc:
16:18:76:a8:08:52:07:25:4c:c7:1c:24:cf:bb:06:
3f:2f:ba:1f:fb:e9:b6:00:53:a3:30:c7:50:89:e1:
a5:71:ca:c1:af:43:b5:c9:5f:6c:df:e6:7f:15:03:
07:37:4b:93:8d:7e:71:c6:ae:44:3d:16:64:24:bc:
da:9a:0a:9a:3c:d0:d6:5c:ed:08:ae:f1:3e:b3:55:
ee:af:43:66:16:54:e8:f2:ec:5d:58:ce:37:60:02:
33:df:50:21:25:86:ae:06:12:c1:0e:e1:61:02:13:
0e:c7:b1:90:c4:df:b8:fb:01:b9:7e:9e:51:96:69:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:8F:46:06:9F:1E:FD:F8:81:D5:D0:47:68:AB:53:B8:0E:C8:68
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:79:dd:7c:df:a0:fb:20:fa:74:5b:09:9e:a2:9a:49:d3:
23:a1:a9:6c:ed:9e:07:99:e3:46:62:55:ba:f1:25:c0:b1:dd:
d8:2a:83:f4:0b:22:96:b8:b1:ef:f1:d3:88:cd:e1:b1:b1:25:
2b:9b:fe:c5:13:2c:1a:ae:9e:bb:c1:ca:fe:de:dc:fd:4e:58:
77:7b:7f:c3:2c:05:66:58:56:da:51:dd:63:d4:1e:41:5a:9c:
e3:a9:28:78:81:e5:74:38:6b:36:54:39:98:58:98:f7:aa:68:
1a:15:d9:55:cf:49:28:8f:5e:49:47:e3:3d:21:83:6b:28:6f:
d6:b5:e3:6d:ef:de:0a:00:ef:c6:02:c0:73:41:83:36:06:58:
ae:71:41:9a:34:03:68:93:78:e2:ab:1f:fc:68:48:7e:0e:0c:
36:c0:59:fc:98:1c:6d:c1:dd:83:94:3f:c5:5e:2a:99:b9:1b:
1d:35:62:cd:d7:b2:1d:b5:51:72:fe:de:d9:3b:fc:58:7d:f8:
e9:bc:0c:16:fd:75:ac:68:e3:e2:8b:f3:fd:56:6e:49:91:b7:
4f:f1:1c:a7:e8:d6:8c:6f:fe:1e:4f:03:dc:da:44:79:0e:e6:
c9:fb:0e:d2:1a:bc:e4:84:e5:e1:6b:db:a0:7e:b0:e4:3f:66:
b9:05:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:19 2025 by rpki-client