Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier: ZFT/p7fwOjdWg9682R0xd8CRI/8UVbA1NMOdES1iczs=
Subject key identifier: 9A:2B:8A:D2:36:CA:D5:F1:F5:18:B4:08:E2:4D:07:35:11:C7:D8:31
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial: 0198D5BBD56B8A8977981BE2B3B8092FFEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number: 127C
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: 9SnyvPh7EHuYA+qEETKovId9xq644hceLfeBAsp15kM=)
2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:6b:8a:89:77:98:1b:e2:b3:b8:09:2f:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=9a2b8ad236cad5f1f518b408e24d073511c7d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:c6:0a:fd:75:54:fb:c6:d5:d7:29:39:34:
90:38:05:78:d4:eb:7e:51:cd:d5:60:ce:41:7d:0a:
29:f1:9a:56:53:61:11:a0:85:8b:ed:1b:0c:28:95:
d4:e7:5a:ce:2d:a5:c1:0f:9b:0d:01:d4:69:28:09:
4a:e5:5f:5d:01:b2:fd:86:e4:f6:2c:d5:63:8e:f8:
aa:be:f6:a5:c7:d6:ce:0b:e9:7f:eb:f1:0e:11:9f:
36:1f:50:5e:46:0d:c7:03:9a:43:94:bd:78:35:9b:
6a:9f:7b:a9:52:7b:b0:a1:3e:06:26:c2:72:08:8c:
66:de:2c:c1:2c:8e:b6:39:dd:da:a7:65:3f:98:a1:
31:19:49:d6:d8:6d:d5:94:39:4c:d5:43:e0:39:02:
15:c4:87:d2:85:09:c2:b4:aa:1e:42:a1:6b:7c:f1:
d4:7f:03:5c:0a:23:46:5e:ad:e2:01:95:bc:ab:37:
07:19:4e:4e:c4:fe:58:ff:db:6e:3e:b3:84:46:02:
47:d9:97:0d:99:03:3c:f9:78:d1:9a:17:36:5d:17:
67:0a:bf:26:84:7f:9f:80:51:64:a4:fb:d2:d0:22:
de:62:8c:fa:f7:de:94:56:ac:a7:61:73:1e:b8:c4:
67:a6:14:19:5e:a1:c9:1f:df:2d:be:8d:e6:d4:49:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:8A:D2:36:CA:D5:F1:F5:18:B4:08:E2:4D:07:35:11:C7:D8:31
X509v3 Authority Key Identifier:
keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:ad:8f:03:a1:df:f0:17:d8:ed:6b:8d:62:d3:a6:8d:51:
72:a9:93:cb:e3:fd:66:a6:69:ab:72:c3:24:19:f1:a5:ac:41:
e2:70:80:13:13:cb:c8:39:9f:de:3a:99:22:e2:40:fc:4a:6f:
93:7a:1c:67:76:6d:8e:af:6a:d0:1e:b8:18:49:05:01:c6:21:
3d:5c:d2:d8:fd:e0:5e:17:db:d9:75:22:06:d7:9c:c2:d6:22:
6a:b2:9c:d9:68:34:db:be:bd:68:ef:c6:a2:8b:27:bc:89:c9:
96:67:1b:ae:e1:dc:dd:49:62:2d:93:4a:7a:42:ac:cd:06:24:
0b:fe:72:42:db:d6:ca:41:ef:df:23:07:7a:99:0a:06:ee:c0:
95:64:ee:a0:95:6e:b6:1a:b8:8c:8d:aa:9c:db:56:3b:55:da:
ce:e3:79:3f:a0:80:79:a3:a8:8b:f3:19:03:7d:c8:1b:e3:0d:
da:24:f7:8a:1e:b8:be:df:20:11:90:9e:0f:b3:15:de:a9:e1:
b7:d0:87:56:ff:f2:f1:c2:26:8c:2e:d0:4c:41:4f:b2:32:d4:
82:1b:74:c6:3e:64:e5:47:a5:33:ba:7f:22:05:d2:cb:9c:cc:
51:ad:99:20:3d:2d:7b:14:98:34:af:23:a2:fe:ff:0d:2f:96:
72:7f:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:20 2025 by rpki-client