Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: V9AOOHu5UiO0yZJ3RVqYYIRVp7xdL+RFa2OX/YxvD44=
Subject key identifier: 78:FB:4C:F1:69:80:89:41:88:92:E7:58:16:18:DE:2D:4A:93:09:4A
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 0198D5F123CC1A0D417079C7F8E26971F368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 15E3
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (hash: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: YWEB2tKL5tpnNgjBduTcPOYnOMJUg+IGAjishwjR3d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:23:cc:1a:0d:41:70:79:c7:f8:e2:69:71:f3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=78fb4cf1698089418892e7581618de2d4a93094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:f6:21:94:b0:c9:c0:ef:c6:ce:36:f8:b7:
19:d4:ac:b3:15:13:13:cf:97:cf:b0:a2:2f:b2:bf:
d2:a8:bc:47:49:7a:c7:6a:fa:cd:e9:6a:9a:a9:a8:
56:65:25:5d:6a:a0:0c:dc:f9:58:69:f9:51:73:dd:
aa:65:b0:97:c2:ab:dd:3e:ec:95:07:7d:ec:85:26:
0a:72:26:4d:da:e2:77:1c:3b:6d:86:94:a0:c4:b8:
60:9e:6c:5b:81:e2:28:4a:07:1c:a5:75:0e:4e:7a:
e0:88:e1:ba:dd:d3:94:45:74:49:98:75:6f:8c:25:
4e:b6:64:e5:e0:0d:72:fe:4c:0d:9e:0e:77:de:06:
9c:01:d2:30:cc:22:18:6a:a4:ca:7b:3d:db:3a:f9:
33:b4:60:a5:24:bb:51:f0:af:10:98:b9:18:f0:56:
66:f0:20:95:3b:06:c3:e7:a0:50:2a:8a:62:4f:43:
e0:b5:24:cc:d0:5c:a1:bf:77:44:a4:1b:2d:63:a5:
96:d3:86:c3:09:a7:07:89:29:e5:1d:4a:1e:1a:58:
9e:fd:63:ff:12:dc:de:3a:ba:ab:39:30:6d:9e:5b:
35:3d:d2:48:36:4c:15:ab:c5:40:10:55:d0:56:d9:
4c:db:98:dc:4a:e4:22:92:e9:30:80:b8:10:90:2b:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:4C:F1:69:80:89:41:88:92:E7:58:16:18:DE:2D:4A:93:09:4A
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:13:65:30:5f:dd:32:f2:36:e3:ca:62:85:bb:fd:1b:fa:
7c:e2:9c:db:75:55:d9:7c:14:6f:d6:99:ec:e4:4e:94:ca:15:
96:9d:01:0c:73:d0:ec:bc:cd:48:10:20:1e:30:c2:f9:5c:8a:
11:20:3c:41:ee:31:f4:03:46:ea:98:6d:e9:a4:11:a5:83:93:
39:92:95:dc:45:7d:49:15:b9:e5:0f:d7:65:a3:a6:0e:b4:ad:
0e:82:3a:83:e5:17:d5:51:f8:00:3e:da:60:45:13:05:dd:81:
13:5a:56:00:2a:49:ea:a3:a2:74:e9:78:3c:c7:ac:2f:90:9d:
4f:98:58:be:2e:ae:a5:0f:68:85:9b:d8:ee:ef:e5:49:7e:c1:
0c:8c:f8:c5:92:50:2c:5e:ed:2e:e5:2f:47:7b:07:6a:5d:fd:
52:df:16:2a:e2:5c:88:fb:47:5c:80:30:8d:18:dd:f8:c3:7d:
db:67:3b:51:54:19:7b:18:36:a7:66:f1:ca:43:43:c1:a4:37:
b1:df:bd:d9:31:9d:34:90:cc:5d:01:b6:66:65:f4:33:b4:8b:
c9:6b:74:98:77:68:a1:34:15:fe:41:ec:44:62:df:b0:8d:1e:
e9:c7:38:f6:ff:18:2b:65:26:6b:a1:24:0b:09:b2:2b:e7:4b:
95:de:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:23 2025 by rpki-client