Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: KBUK4c6+j1OC/XQuOt9m3blvkK2vz0ZEAWwzdIXvHLg=
Subject key identifier: 1F:8A:0B:F0:DE:05:80:53:37:87:2D:68:BF:CB:B7:04:5F:2B:DA:08
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0198D4043F8B138FC7935BFBC5053ACE0FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 062B
Signing time: Fri 22 Aug 2025 23:01:44 +0000
Manifest this update: Fri 22 Aug 2025 23:01:44 +0000
Manifest next update: Sat 23 Aug 2025 23:01:44 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: fNNXHkWngflo2HzFIIAFsEN3EY75jG04BrDiMbNB+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3f:8b:13:8f:c7:93:5b:fb:c5:05:3a:ce:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Aug 22 23:01:44 2025 GMT
Not After : Aug 23 23:01:44 2025 GMT
Subject: CN=1f8a0bf0de05805337872d68bfcbb7045f2bda08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:21:45:4b:04:39:95:29:90:7b:71:9d:57:
0a:15:74:75:dd:78:f7:90:3c:e5:4f:23:83:80:9c:
5a:36:1b:27:64:3f:7a:e7:62:a8:0d:89:65:8f:3c:
c8:21:7a:a6:3c:82:d6:bc:f2:5b:34:e8:24:bb:e0:
0e:9e:53:39:4f:79:41:5b:76:50:11:1c:7a:af:82:
5a:9b:b4:06:5d:f1:5e:22:91:9a:22:74:72:da:6c:
53:bf:7e:94:15:79:f7:77:c5:f2:73:64:cc:dc:31:
3d:1b:ea:3f:2c:09:f0:fb:81:98:3a:69:fa:c3:64:
dc:16:0c:6e:8b:40:84:e4:a9:73:87:06:1f:53:a3:
21:96:32:93:10:98:90:c1:df:3a:78:43:0f:dd:ca:
2d:8d:5f:97:6f:37:07:51:23:ec:a5:4f:3e:65:d5:
9b:e4:22:55:29:b3:2a:76:d5:70:5a:63:26:8c:43:
77:ec:41:b5:50:95:09:d1:58:41:2b:85:2f:ef:b1:
11:e2:2a:2a:e8:d3:a8:19:5f:a3:4a:78:a9:82:96:
e8:7e:fd:90:68:19:eb:ba:fd:27:be:48:7e:3e:cd:
e2:6a:7b:e2:6c:66:0d:72:3d:03:2e:71:9b:bd:20:
b1:86:37:9c:15:a6:9e:c1:5c:48:2e:01:c9:a1:67:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:0B:F0:DE:05:80:53:37:87:2D:68:BF:CB:B7:04:5F:2B:DA:08
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a7:8f:e3:1c:99:e1:6f:b5:ae:09:ee:0a:38:41:ac:24:ff:
e6:7c:4a:fd:5f:45:64:be:9b:79:f9:6b:45:0a:39:d7:07:6a:
83:ed:4c:bf:d4:e4:a7:89:dd:5b:05:ef:ac:5f:29:c8:1b:55:
9b:f6:86:cd:06:2d:6d:71:25:11:04:14:e1:2a:0e:11:43:15:
9e:8f:53:57:0e:70:b7:b2:95:76:fd:da:e1:32:32:fb:08:a1:
c4:72:2a:4e:a3:78:15:55:a8:45:49:c1:12:f3:25:47:15:d8:
f3:73:11:10:c9:73:45:55:9c:38:9c:16:0a:13:69:e8:d8:6b:
24:ae:fe:0a:3a:3d:d8:f7:61:ce:ba:5a:aa:79:40:10:a3:0b:
f7:2b:3d:4f:c6:a2:58:63:9f:0d:53:e7:8e:e6:6c:0b:b1:72:
79:84:04:a7:1b:16:ae:01:9c:7c:45:e9:16:00:21:9b:60:30:
2a:73:76:8e:0b:50:29:7f:20:56:0b:e2:1e:3c:88:14:da:ab:
70:7d:aa:e7:a2:0b:90:72:8e:e9:2d:77:51:58:44:16:cc:1b:
6b:8d:eb:4a:36:2a:f2:27:9c:16:16:39:82:b5:6c:f4:aa:c5:
56:d9:c7:d1:ba:f2:8e:22:7a:99:d0:34:23:86:e3:b3:43:5d:
6d:92:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:38 2025 by rpki-client