Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier: UZLkv89D9gp5rHDf1U2icjv5mAf7LMfuHRpQkedyctI=
Subject key identifier: 4B:E3:4C:1B:79:9D:34:09:5F:4F:CA:42:4F:8D:F8:73:26:21:75:77
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0198D5156A244696737551615626D96E638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (hash: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=)
2: 4dR87DFU1h-_n9gWgjfEcPKRNjQ.roa (hash: 2sOA9bFKi1Li43Qu+cU631T12GoMBvyIUcumh0ZnQK8=)
3: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (hash: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=)
4: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (hash: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=)
5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: S9aEVRUuDWM/w34ZE4W2q5sWeIjCDGHV+onj3oWrkOI=)
6: fyUduA7iLRzPOu8jJXAMIB-HOkE.roa (hash: cIQaQBrp3go+iSKqU55ZO7AX4q6Ht8Tb5+J8gXHDuFM=)
7: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (hash: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6a:24:46:96:73:75:51:61:56:26:d9:6e:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=4be34c1b799d34095f4fca424f8df87326217577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:81:c9:81:07:ce:c9:25:17:b4:4b:db:ea:
9c:d8:29:48:83:17:3d:82:d3:73:b2:6f:92:33:24:
5d:96:a5:dd:00:d5:10:79:1a:b6:83:66:7d:c2:ce:
76:55:77:6e:85:99:54:36:1e:33:3d:15:34:66:10:
d1:6b:95:53:8a:ce:77:cf:ba:fc:4a:d8:24:43:20:
50:4f:7c:f5:25:c6:8c:ee:38:6b:fb:6f:5f:a2:1c:
33:0c:02:d5:49:8a:60:0c:bc:3e:ce:19:b2:87:33:
8a:4a:71:b8:d4:83:8d:e5:8a:d2:7d:b5:3b:f1:41:
26:b4:9b:1b:2c:fa:7c:46:7d:49:4f:c9:cf:f0:75:
23:43:99:fd:79:9d:a6:b1:df:aa:12:d8:04:b7:c5:
1f:e7:43:96:f3:dd:87:3e:0f:fb:1e:8c:d6:59:c5:
6d:1e:87:89:e0:d8:10:8b:5e:82:8a:2d:d4:a2:a8:
88:0b:7c:75:1d:43:34:48:c8:60:99:64:12:0e:50:
6d:0e:3b:20:c9:cd:ac:bf:5c:10:ce:56:e3:0a:4e:
96:86:39:0a:db:b6:5d:b1:97:9c:04:7b:a0:a1:1e:
64:63:bb:51:8e:94:c0:50:bb:4c:c7:c6:64:c4:eb:
1f:d9:79:ea:fc:22:4d:60:63:9d:24:26:02:0b:18:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:4C:1B:79:9D:34:09:5F:4F:CA:42:4F:8D:F8:73:26:21:75:77
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:27:fb:bd:22:ec:1b:30:e8:19:2d:e3:c7:82:6e:43:e9:90:
2b:86:69:9e:34:3d:cf:e0:ee:59:72:5c:64:66:70:ae:0b:c1:
c2:9d:39:c5:45:a8:4b:b2:df:8a:0e:df:a4:ca:b8:f5:5e:37:
ff:92:e8:5e:90:88:d2:04:d1:ad:44:82:01:83:a8:45:28:3d:
23:e7:07:cc:b1:ff:07:96:4e:b4:5d:70:32:cb:6b:bc:d7:49:
db:0f:17:10:ca:8a:80:84:4a:d7:40:57:fe:9e:92:fc:c9:46:
4e:03:32:b8:ad:3d:7f:a7:a5:da:a5:2a:6c:8a:8e:54:60:c3:
ad:18:98:1e:16:7f:ca:d6:be:d3:65:a9:8a:e3:24:fd:3d:ca:
fc:63:e5:83:3c:4c:1f:d0:d9:54:30:5e:ad:51:f1:0c:2e:d8:
d4:1d:d3:82:b7:90:cd:96:20:21:0c:a5:c0:aa:ac:cc:e8:a2:
7c:c8:8e:41:6e:6f:0a:ee:0a:3b:df:51:8a:1c:0f:c7:28:22:
d2:4e:2d:f1:6a:af:7f:ca:f7:24:9e:cb:4f:51:a3:6f:ba:98:
38:b6:ef:9f:26:5d:a1:0c:17:85:9d:e7:ae:ee:1d:67:5a:1a:
70:3d:17:4e:6c:6a:ef:d8:b9:ed:78:69:60:97:34:ff:2c:fa:
b3:bc:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:51 2025 by rpki-client