Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: BzLTIatGjgVloPn3qDXZ510M/6v/TEWGpeut1Zp4DHg=
Subject key identifier: 49:72:E3:D7:B8:10:9B:7B:8F:C5:6E:38:27:3C:C6:29:0F:7B:BC:5D
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0198D5F1C85C69A77AD78509999A3495334C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 098C
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: BCK30mt5CL4uukFYpYuMgMXx/O1tdT3K9fbEKjCrk10=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c8:5c:69:a7:7a:d7:85:09:99:9a:34:95:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=4972e3d7b8109b7b8fc56e38273cc6290f7bbc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:da:f0:6f:e2:a9:50:61:4c:c1:95:15:c1:
2f:4f:08:b5:47:d0:81:cd:c4:80:f3:34:d9:08:de:
e7:a5:d9:10:31:fe:81:ba:ce:f7:b1:e1:a3:69:ce:
ed:ac:48:db:95:19:9c:34:02:97:0a:50:fa:9b:6e:
c2:89:bb:fe:48:2a:9e:d9:c4:35:71:94:ae:25:13:
d8:6d:fd:5a:f3:d2:61:2e:12:c2:21:0d:e4:8e:96:
1a:20:32:08:8b:4b:98:19:82:03:b2:a7:c3:63:e1:
15:87:9a:7c:b9:18:65:4f:a3:db:63:87:2d:3a:b3:
10:8f:a2:b6:65:14:bb:68:41:08:8c:81:cc:b7:38:
2f:ef:62:62:7a:ee:6d:e3:08:ba:de:df:e1:b2:43:
e9:a0:7c:71:5a:d1:f0:66:b9:18:a4:25:05:9a:26:
4d:9a:b4:67:2c:f1:05:a3:72:83:83:88:8d:a1:6b:
84:d7:f2:2d:8e:4f:98:92:7d:d7:c3:fa:01:7c:bd:
fc:2c:25:0c:f6:02:8f:79:9c:59:b7:82:33:39:d4:
98:92:96:87:b0:0d:27:b4:e1:7b:54:ca:15:ef:a5:
21:ca:48:1f:f3:46:9d:0b:61:07:59:20:eb:5c:b1:
73:cd:f5:2c:d3:7e:c5:51:ac:6c:9f:6a:43:36:5b:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:72:E3:D7:B8:10:9B:7B:8F:C5:6E:38:27:3C:C6:29:0F:7B:BC:5D
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b5:a0:c3:fa:6c:e8:2c:e1:70:84:98:50:89:37:97:68:cf:
95:2b:bf:55:04:2b:7e:08:e5:f8:3b:da:71:f1:6f:27:5f:59:
a3:d1:5f:f2:ba:b3:0d:2b:6c:9e:75:e3:37:41:6f:a7:bb:ca:
6d:93:12:a8:c3:00:8b:ff:d0:17:3b:e1:3b:87:f5:d9:06:71:
a2:64:c6:81:6f:dc:d9:e4:25:46:38:96:3f:de:f1:eb:2c:8e:
83:d6:5c:e6:e3:84:1c:83:ed:2a:14:cb:4d:38:91:8f:7a:0b:
4c:81:40:fd:5d:fa:7b:00:9d:33:40:34:bf:7e:98:73:4a:88:
e0:72:8a:22:50:c4:52:93:77:07:ed:0f:13:a9:3f:a9:ae:c1:
ac:cb:f5:65:90:7d:2e:02:2d:49:ee:61:e4:9a:7b:b5:b8:b1:
cb:84:3a:51:8a:48:88:79:d7:6a:f2:5d:97:d4:0e:64:b3:b2:
01:42:a2:8a:6b:bc:92:fd:35:dc:11:81:7c:d7:d2:66:3e:e6:
36:ff:ed:3b:a7:ce:da:db:b6:0c:54:1e:3e:ee:41:e0:6f:17:
8b:15:87:af:a1:52:83:45:6d:0d:cb:1e:5f:5c:27:56:14:ee:
a3:0d:22:a3:e4:9f:68:81:ee:75:00:40:80:ef:3d:c7:f0:fc:
ae:f5:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:38 2025 by rpki-client