Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: ke0gBGI8IOuReiBu5tH5wZJYpLz/sCB7ELk2glXKKJw=
Subject key identifier: 18:DE:07:89:79:DB:E4:C3:32:C4:E9:94:BD:E1:E7:01:E6:70:AA:B3
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 0198D4A79415500EF7F70DBF2F73032FD413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0FB1
Signing time: Sat 23 Aug 2025 02:00:08 +0000
Manifest this update: Sat 23 Aug 2025 02:00:08 +0000
Manifest next update: Sun 24 Aug 2025 02:00:08 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: 8K5fwRtV5/qXKvfDdG/PHnp5IByUQ9m5/7k9CrTaCIM=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:94:15:50:0e:f7:f7:0d:bf:2f:73:03:2f:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Aug 23 02:00:08 2025 GMT
Not After : Aug 24 02:00:08 2025 GMT
Subject: CN=18de078979dbe4c332c4e994bde1e701e670aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:1f:cc:32:1d:38:1f:ca:46:3c:d2:1c:e6:
8c:b8:6a:ea:c3:1b:d6:e7:19:a3:b0:f6:4b:16:6a:
e8:0f:24:2d:4f:b3:58:db:73:64:e9:fa:4d:c2:4d:
96:fa:d5:50:2a:21:87:b1:cb:e0:f1:4e:e3:3b:a5:
4f:73:5e:e5:5f:a3:ca:41:54:83:08:f8:51:8c:36:
91:b3:f1:e4:d4:be:54:9a:67:d6:4e:23:89:e9:02:
bd:14:15:f4:22:46:8e:25:4e:df:54:a5:a4:83:75:
3b:c3:2b:b4:d2:2a:d1:cf:e1:94:c3:00:a1:ed:87:
7a:5d:40:8c:ac:3b:43:46:8a:db:74:31:23:a3:97:
60:52:3e:28:4a:de:97:d1:0b:b3:63:72:ac:5b:ef:
2c:12:8a:7d:d5:59:d9:b4:c1:ef:57:96:ec:b3:9d:
f0:71:43:ee:cb:1d:b2:11:db:2b:94:a6:7f:2c:cf:
1a:9b:da:81:35:30:24:1e:43:67:11:86:4d:b6:34:
b6:d8:15:de:5a:65:07:13:cc:dc:b5:0c:8a:00:3a:
ff:1c:a0:29:7f:cf:fb:bc:78:21:2b:da:29:a3:26:
4c:83:ba:ca:4a:a2:8e:30:31:e3:15:41:e6:1e:96:
e7:20:31:9a:f9:a7:2b:b6:0f:25:ba:aa:c4:2c:71:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:07:89:79:DB:E4:C3:32:C4:E9:94:BD:E1:E7:01:E6:70:AA:B3
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:eb:c8:08:a2:ef:20:94:0e:11:93:ad:78:99:9a:9b:49:50:
0e:d3:de:9d:c8:be:e4:3c:63:9d:54:8d:02:0e:1d:4a:87:c4:
c6:be:92:27:19:e9:5d:e8:c1:d5:01:47:b9:63:ed:65:0d:e9:
26:c8:ee:9e:69:4d:b4:50:8c:0c:ed:bc:75:01:8f:cb:29:ff:
9f:bb:56:36:d2:6e:e6:53:c8:c6:49:f8:2f:27:43:df:42:36:
2b:b2:44:38:71:db:ee:d4:52:35:15:d8:db:f6:1e:6b:d3:c1:
78:89:87:2f:75:ca:d6:60:eb:37:c9:b5:05:fa:cb:11:fa:3f:
5c:61:30:1b:45:37:2d:c4:c2:21:ce:50:7b:ed:2d:ed:04:c7:
35:ec:5e:06:23:85:1c:01:b8:b3:d6:2f:1c:cf:7f:a1:47:93:
11:c2:09:7f:2a:56:c1:ee:1d:29:47:b4:eb:3d:27:6d:09:f6:
6f:a1:90:9a:e4:82:6c:a7:0c:54:a8:c1:99:a6:cf:8e:44:a0:
99:84:9d:5b:ac:fc:96:cb:ae:6d:6f:bb:75:22:5b:43:1a:71:
2e:bb:4d:d0:5c:82:1a:8c:f6:bd:71:bb:b4:75:43:32:fb:c5:
27:d0:06:bb:cb:3c:56:0e:35:5d:29:a7:89:86:60:3c:23:51:
2a:87:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:14 2025 by rpki-client