Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: eyL4exaSjHP9VWswSRDUriGSV7RajqYeEul5BCBFOq8=
Subject key identifier: 1D:A1:7E:32:60:78:3C:53:FE:CB:02:9F:27:F4:89:D9:BF:EE:51:43
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0198D583805738D794D222C67535FCC172E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: 4Dpr0SqPN51FynSTTrzuSpnUtcmVCWuwiJ+9l7mcXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:80:57:38:d7:94:d2:22:c6:75:35:fc:c1:72:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=1da17e3260783c53fecb029f27f489d9bfee5143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:e3:96:7f:2a:74:91:d8:1f:ad:a2:e4:3b:
8a:6c:b9:c9:b4:e5:e3:b6:98:11:39:c5:64:fa:12:
80:3e:64:a7:9a:57:3d:82:7d:57:1c:f4:1e:7a:71:
6e:2e:5e:26:9a:fb:d1:9e:a2:f9:cf:3b:a9:85:3a:
23:29:62:a6:2a:cb:fa:d6:49:d4:89:b1:ea:79:4e:
64:92:5c:09:59:dd:45:c1:d3:2d:9c:25:eb:5b:69:
0b:c6:45:ae:21:52:08:2f:b8:06:d0:c9:be:c3:49:
ff:57:af:17:58:2a:c4:9c:35:d5:de:2d:27:53:29:
95:ab:75:da:83:f0:8c:93:ed:bc:86:11:12:3d:b9:
c9:20:29:58:57:4d:5b:0d:b6:4b:20:95:c7:2f:10:
ee:c7:d3:b8:0d:4a:4c:1a:d7:2e:9a:57:28:46:b2:
00:99:4b:3c:86:87:ad:47:8e:cd:8b:c5:eb:52:76:
23:38:5e:c3:f9:94:cb:06:bd:69:df:e1:68:dd:58:
32:2f:a1:d1:85:7c:fc:c3:37:8d:8e:4f:ce:c7:b1:
d5:49:98:88:76:19:8b:28:98:0e:82:47:ef:8e:1d:
e5:f4:4c:39:39:ed:03:25:0a:38:60:15:a1:ce:36:
dd:0a:21:08:96:ff:b9:f8:a0:23:26:39:6e:a0:6a:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:7E:32:60:78:3C:53:FE:CB:02:9F:27:F4:89:D9:BF:EE:51:43
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b8:1f:30:69:6b:39:9e:72:97:d2:bf:21:f3:8a:34:7b:ef:
8d:e4:50:29:1c:66:40:95:c7:19:ed:ec:84:6e:34:54:3c:06:
4d:d1:ae:85:60:c4:38:79:07:ef:ac:1c:be:e3:90:9b:61:67:
70:af:02:28:6c:01:50:c6:ba:6b:c0:d5:2f:69:12:21:08:94:
87:5e:2f:99:39:e8:85:0b:c9:e6:d1:9e:41:15:ac:91:97:91:
d4:a8:58:b6:ba:6a:a7:ac:00:bd:6f:90:c8:3c:e6:b8:7d:2b:
2e:1c:69:9a:8b:da:06:46:95:0d:9b:c9:f4:91:7f:ad:cd:df:
b1:5d:07:f4:4a:74:78:1c:4a:5b:e9:83:d6:fb:60:c9:40:3b:
fb:43:ca:15:f5:9a:41:f5:9e:c3:c2:39:45:03:07:db:89:c0:
3d:ca:eb:2c:ec:bd:cd:2c:29:a7:c1:f4:d1:53:78:fe:a4:0a:
1e:1c:8b:f8:34:6b:60:b9:c7:a6:27:1c:f4:32:ed:ea:97:df:
4b:bb:03:0b:19:05:1a:01:4a:f5:9a:a3:96:60:3c:80:a9:97:
f9:cc:f6:18:a0:af:80:7f:a9:ba:80:ed:39:1b:3e:f7:0f:20:
ea:ca:e1:33:06:ff:45:d3:87:63:c4:4c:fc:a1:8d:d3:c0:60:
4b:3d:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:29 2025 by rpki-client