Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: Zc6jzcJo90a+h3Mc13DumSKvruEFhFwcP7GTdPp5dPI=
Subject key identifier: 8F:D0:06:8F:EA:CD:56:88:C0:F1:05:4E:7E:6E:16:4E:08:56:5F:83
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 0198D5F172F83C13977223272F7836D8D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 15A0
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: wHvQgYROr8XNG+Ro8n9/OoF2mEQe9BOeHQEP3lFNoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:72:f8:3c:13:97:72:23:27:2f:78:36:d8:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=8fd0068feacd5688c0f1054e7e6e164e08565f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:27:33:ea:5c:eb:ab:d2:00:13:b9:e0:25:
0c:86:e3:31:e6:dd:59:be:c1:af:b9:13:0b:72:ea:
be:f1:cd:e2:6d:dc:bb:0f:95:ec:3f:42:84:43:ad:
f3:84:6e:23:fa:3a:08:9e:3b:b2:4a:d8:83:ed:4e:
d4:ad:88:91:91:ab:05:30:64:99:16:b5:d8:a0:c4:
0f:da:06:82:c2:ce:29:55:d5:57:5e:a8:75:5d:ef:
5a:8d:4c:9c:a1:ab:9f:06:d7:ef:b4:0b:9d:c1:c7:
da:88:bc:bf:35:52:f2:ac:b1:c1:aa:49:62:e7:47:
17:81:c1:a3:c3:ba:56:ca:15:66:25:77:5b:eb:6a:
57:08:d4:27:76:35:a7:64:97:86:84:3d:b4:65:74:
62:6f:d8:67:ba:b5:ca:54:99:e3:1a:3d:a9:89:2a:
19:5e:fc:8f:a0:ff:c4:24:84:2d:41:f9:c3:40:79:
ca:d2:26:ac:95:46:f8:63:07:15:8a:61:5b:6e:e8:
65:57:31:8c:f7:be:78:1b:19:c2:a3:d1:b3:c5:8d:
e5:5f:75:69:91:63:91:d9:f0:09:4f:fa:68:3a:3d:
f5:8c:85:bb:62:4e:a5:ea:41:23:97:d0:ff:0d:8a:
7e:72:02:10:8b:89:d3:5e:c8:3d:2b:3f:ab:37:71:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:06:8F:EA:CD:56:88:C0:F1:05:4E:7E:6E:16:4E:08:56:5F:83
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:64:1f:86:2f:45:99:20:6c:a0:2c:f7:d2:7b:08:07:9c:
92:1e:60:73:24:46:0c:b4:96:7f:ae:c1:99:35:bc:ca:b7:9c:
24:0d:14:70:c1:ea:3c:0f:65:2f:b0:f8:76:14:43:92:50:ac:
cb:44:86:46:0b:2b:98:b9:6e:9b:32:87:93:ea:ea:28:dd:17:
58:18:57:c5:97:bc:6a:3e:02:80:25:97:1d:4c:e6:3f:55:5c:
79:fa:9c:95:9f:7e:ff:68:2f:21:52:43:3f:9e:8a:f5:0e:7d:
57:a4:50:6a:ff:4c:0a:da:cb:21:bc:49:6e:a6:25:29:0b:b7:
3c:78:30:6d:54:19:f0:3a:23:cc:b3:58:4c:81:a1:f2:ed:b1:
37:67:9a:5b:77:90:80:7a:94:2b:f0:8a:b9:39:38:17:d1:a7:
66:e9:2b:52:bd:45:41:9b:8f:43:19:ac:30:17:0e:95:88:66:
aa:02:a3:c1:40:96:ab:1a:b4:de:8d:de:d4:80:87:08:2f:84:
2f:43:ea:33:53:e2:a6:b8:09:d4:d4:86:c4:17:b8:51:42:e8:
de:8e:0e:69:26:83:5e:c2:e0:b7:30:7c:88:b0:3c:5b:e4:f5:
89:eb:f9:78:31:1b:b9:30:e2:05:dc:93:78:21:1c:a8:5b:39:
a1:57:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:21 2025 by rpki-client