
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: hLpfnIISgKOTRgELoGpmxHvIQnH0LVttLG/uNDIv++I=
Subject key identifier: B6:44:E7:CB:13:08:55:56:FF:63:BB:6C:7C:7A:59:EB:53:4A:17:18
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 0198D7A904E5654B9877D383AB0379AF8AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 16:00:34 +0000
Manifest this update: Sat 23 Aug 2025 16:00:34 +0000
Manifest next update: Sun 24 Aug 2025 16:00:34 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: ImNTNb1EyTfyx+7mTTIafQbYs0toyWcdnEoQctQ4hNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:04:e5:65:4b:98:77:d3:83:ab:03:79:af:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Aug 23 16:00:34 2025 GMT
Not After : Aug 24 16:00:34 2025 GMT
Subject: CN=b644e7cb13085556ff63bb6c7c7a59eb534a1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:5b:25:25:f6:8d:e5:4a:e4:0d:55:38:11:
10:68:59:17:7c:b1:5a:bc:43:5a:c8:27:05:48:af:
59:e0:b7:db:61:45:7f:3a:fd:26:5f:20:9a:15:fa:
8d:c1:97:31:f2:b0:6f:e5:f4:b0:52:2b:1a:93:77:
e3:bc:19:0f:d4:fd:e9:3d:2c:ad:8c:d1:92:4f:ca:
6b:94:c6:4e:b9:f1:28:ff:0f:0b:17:68:8c:43:11:
41:62:88:95:0e:65:9b:8d:4d:d1:44:e3:02:8d:79:
e8:62:66:eb:40:99:81:07:ea:4c:f6:3a:c2:92:94:
44:b9:25:ea:c1:62:92:75:c2:89:06:8b:75:93:1f:
a0:a8:e8:9a:05:8e:e4:d1:f7:50:94:8a:e4:21:b6:
bd:35:32:d9:b8:12:91:ca:c8:b1:37:9f:cd:66:82:
7e:a7:8e:81:32:4e:b4:69:40:75:37:c4:74:aa:f0:
eb:0d:36:ea:33:69:8d:49:57:ac:40:9c:3a:cf:35:
4f:75:cc:68:08:7c:ee:a3:26:c1:2a:93:d3:6d:42:
7e:91:43:27:ec:a7:a7:0c:51:59:ec:d7:77:7c:ca:
99:5b:f0:18:49:52:a1:a2:23:9a:b6:e1:19:8c:15:
f6:94:ef:5d:e6:fa:e0:e9:bf:b5:0c:57:6c:22:95:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:E7:CB:13:08:55:56:FF:63:BB:6C:7C:7A:59:EB:53:4A:17:18
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:46:a0:e3:97:2a:1e:b5:df:56:37:08:09:95:9e:12:82:20:
33:dc:c8:c3:9a:25:8b:c1:c8:7c:6d:7e:08:0f:68:ad:8d:f1:
44:ff:a7:4e:42:e9:63:5c:3f:4a:46:51:6b:8d:4c:75:3c:54:
52:ac:3f:92:c3:dd:68:f2:0c:fc:3e:16:3b:d5:be:d7:fe:f3:
ba:40:14:7d:a0:83:1f:1e:ee:bc:d5:84:50:63:87:16:39:fd:
cc:ab:3e:1c:46:36:6e:0e:4d:e2:86:40:71:18:8c:c8:61:15:
69:bf:f9:35:3b:8a:e4:d2:13:f2:cc:28:81:02:81:e8:9f:6d:
86:71:97:34:59:a6:3b:03:14:85:cc:24:dd:2e:20:ad:a8:90:
62:8c:c7:93:0a:31:d5:2b:17:16:08:cf:e0:97:12:bd:70:11:
2b:ad:27:76:51:b5:a6:ed:dd:ad:5e:6c:07:f6:ca:57:aa:d7:
44:78:69:01:78:f1:e9:fe:f5:51:11:85:49:88:f1:fc:7c:5c:
bc:2a:1c:ab:6d:fd:36:40:da:3f:93:fc:cb:58:69:76:97:27:
35:3d:ad:dd:9c:4a:2d:f1:d1:9f:8d:5e:cc:f7:70:d3:1b:3c:
5a:1b:d7:6a:47:0c:3c:e2:b4:0d:87:e1:6e:a7:20:df:5a:6c:
2c:9d:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:54 2025 by rpki-client