Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier: GbW2y72VOn0McqIURBfFHZBlpDhndq3qwaIxrnfPqGg=
Subject key identifier: 6F:16:16:C3:D2:A5:79:49:78:C0:C0:4E:A4:7F:78:A8:31:2B:BF:46
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial: 0198D5BC0CC94A0BF5EE507CB87D2A36E596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number: 09AA
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: oJHLEz5KC6LODBPGtxbhyr2MucJc/GAU1dR34vQ1nAk=)
2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0c:c9:4a:0b:f5:ee:50:7c:b8:7d:2a:36:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=6f1616c3d2a5794978c0c04ea47f78a8312bbf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:25:d6:2e:b3:4e:ee:40:17:3a:40:45:95:
90:fc:7b:a1:bb:44:25:82:38:8e:06:77:9f:05:48:
00:e3:9f:50:ba:76:54:50:d4:97:de:58:67:c1:b5:
56:91:5b:87:1d:86:07:21:5b:1c:80:c3:e8:25:59:
06:e4:9a:8b:a4:8d:b6:58:ab:30:47:fb:d8:40:6f:
1f:fa:02:06:02:e0:e5:3e:97:df:89:90:c9:77:4f:
68:0d:55:a6:47:50:bd:6c:10:1b:d6:6d:19:51:49:
42:e7:11:b2:57:03:78:7b:55:8e:5f:55:99:e0:e4:
fd:a1:bb:eb:3e:1e:fe:a1:75:05:bd:3d:f3:27:ae:
de:df:79:fe:4a:74:bc:32:22:8c:17:0a:f2:8c:a1:
52:d8:f8:7b:5d:0f:7b:32:bc:7d:6b:c6:62:44:c6:
d4:0d:78:68:91:90:05:3d:df:65:b5:e6:82:a2:a2:
b3:39:83:e7:ee:f8:b1:e0:8a:56:d4:b0:5c:6b:e1:
b6:6d:fe:ef:59:70:48:e8:2b:b5:f3:98:66:a5:bf:
16:22:64:b8:4f:85:7b:0c:28:4b:8a:01:06:b2:2b:
2e:a7:8d:22:67:a6:59:b3:1f:5a:97:eb:6d:bd:5b:
07:31:34:4b:3b:a6:79:57:0e:fa:3d:e0:f9:21:51:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:16:C3:D2:A5:79:49:78:C0:C0:4E:A4:7F:78:A8:31:2B:BF:46
X509v3 Authority Key Identifier:
keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:da:cd:21:c1:ab:dd:09:12:9c:fa:31:af:3e:bf:5e:34:a6:
69:23:3f:36:d0:94:ed:56:26:92:8c:44:bc:2e:7d:9a:8b:76:
ef:cb:56:d1:04:2d:ae:e0:28:90:06:b4:e1:e1:26:ab:2f:0d:
47:08:ae:ff:b6:26:a9:5c:ff:63:53:c6:5a:00:71:79:4d:94:
3a:14:0f:37:36:95:21:76:1f:2e:da:68:ca:8b:cb:2a:78:33:
75:9c:34:63:74:88:12:7a:53:e1:15:6d:cf:c1:82:6d:1a:f8:
43:70:1d:39:09:ed:d7:1a:25:31:77:b9:b9:34:5d:02:34:0f:
d7:25:88:88:1f:e0:27:26:90:10:68:66:66:4e:41:ee:a1:2f:
38:47:61:f2:5e:b0:b8:23:53:77:bf:3f:ba:3b:b5:20:54:09:
b1:10:89:a8:57:61:8a:60:98:fa:bc:35:d1:09:1d:f1:bf:87:
4a:58:8b:e3:ad:bf:06:21:6a:2c:f2:87:5e:c1:52:36:58:d9:
99:97:4b:01:56:5d:57:75:82:a8:8f:62:c3:9d:43:ea:68:07:
f2:25:70:04:4f:7b:00:41:36:7d:46:e1:a0:4d:f6:b7:af:23:
a0:7f:a7:d5:2b:af:aa:52:70:b0:74:98:2e:72:69:96:16:a0:
10:5c:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:01 2025 by rpki-client