Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: rX9KCT3tk9JFJOXGAw0WW2fyn1RZZLExmK3Pfqu67Gw=
Subject key identifier: F0:3F:25:D9:D9:45:28:EF:D6:9C:AE:95:17:CA:CD:9F:89:B2:75:32
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 0198D473B5AF55493CFBBBAC193280578E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 077D
Signing time: Sat 23 Aug 2025 01:03:29 +0000
Manifest this update: Sat 23 Aug 2025 01:03:29 +0000
Manifest next update: Sun 24 Aug 2025 01:03:29 +0000
Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: 8xP7vZVPharU3MOVQnZ0W3Vs7Kh9ubfQkgKjQeEruvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b5:af:55:49:3c:fb:bb:ac:19:32:80:57:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Aug 23 01:03:29 2025 GMT
Not After : Aug 24 01:03:29 2025 GMT
Subject: CN=f03f25d9d94528efd69cae9517cacd9f89b27532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:68:20:70:73:67:9f:c2:e0:39:f7:5c:e5:
65:64:b0:1e:50:ea:58:56:2b:07:bc:81:86:64:d5:
e4:ec:58:84:28:3f:11:48:39:8d:29:93:a4:41:8f:
a9:ac:54:7d:94:f0:90:64:e7:b2:3c:79:73:15:e9:
00:e9:0c:71:85:d4:78:e0:ec:0f:ad:44:89:72:8f:
4e:7a:89:78:4d:eb:d9:09:ff:1a:53:7d:6a:f9:b9:
00:49:ee:c8:49:7e:7f:93:05:3c:84:e5:f0:0f:f7:
98:69:2c:18:7f:a1:41:3f:74:4c:41:74:7e:41:f2:
14:0f:3a:79:12:ff:16:76:62:b5:e3:2d:07:e6:66:
71:27:9c:8a:43:88:38:9c:a4:70:14:84:37:72:f0:
57:11:03:cd:55:f2:cb:78:3c:9d:47:d9:fa:0d:6e:
35:50:18:16:c2:29:ee:bf:42:10:34:32:48:93:9b:
61:03:e2:98:1e:d4:45:a0:a0:e8:f7:48:eb:a7:e7:
84:62:f0:ba:a2:e1:9d:0c:dc:b8:fd:35:32:88:10:
92:56:6f:7e:07:18:16:55:24:d5:c3:a7:cc:12:df:
02:cc:ac:bb:35:fb:81:22:91:b5:67:44:f3:38:f2:
f0:f3:9c:07:9e:d7:3b:3d:17:81:e1:b7:02:0b:ee:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:25:D9:D9:45:28:EF:D6:9C:AE:95:17:CA:CD:9F:89:B2:75:32
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:29:ed:10:66:61:45:c9:a9:2c:e2:32:a1:6f:bd:6e:d1:
b3:09:90:44:c6:1f:ee:db:6d:fa:13:d8:42:09:27:84:34:ed:
6c:d1:43:77:04:bc:6f:2c:60:a5:8c:a6:a5:52:03:4a:6f:bb:
4d:ef:0a:00:ce:67:bf:d2:04:25:d4:65:27:9d:17:fc:84:6a:
84:c7:29:7f:70:c1:d2:48:53:55:18:07:7f:b1:21:b3:13:11:
cf:7a:59:d7:d1:cb:db:58:07:8b:d5:ee:07:79:25:ff:99:f4:
a2:82:39:8f:fa:dd:7c:70:d6:b7:b1:e7:a4:04:47:79:64:65:
7e:11:2d:d8:e3:8c:3a:c2:bf:70:b7:be:06:c5:75:4b:a2:5a:
d0:52:c1:e5:14:ce:2a:6d:e5:2e:0a:c0:d0:3c:53:7c:c5:aa:
c6:d7:a8:cc:59:a8:ac:c8:b8:a0:e3:b4:d8:34:ea:4c:99:fb:
ee:97:67:60:fc:ea:72:69:18:6f:24:80:d6:4a:15:2a:47:6b:
4d:8a:3e:e9:36:35:7f:16:37:7f:bc:13:4b:46:15:4a:82:55:
c8:0e:77:6c:86:57:84:c1:a6:b7:4c:0e:02:85:ee:54:91:4c:
a5:97:27:4b:00:5f:cd:ab:16:03:1f:22:33:7e:f4:46:3a:23:
99:25:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:53 2025 by rpki-client