Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: GmysS3HpSlYHcjkhDj28MoQlGbjZjbU4PlMoXwNe2pQ=
Subject key identifier: AF:F6:80:9D:52:88:1B:AD:A3:04:5E:6A:40:C1:B2:3D:18:6D:0F:75
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 0198D5F1CD893C4F7C2B9BDA7924B88C66F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: 0185
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: IHSXJZFZYuBD0yPZWFn4EQNVKrcEBgIUv9H9gSVrBjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cd:89:3c:4f:7c:2b:9b:da:79:24:b8:8c:66:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=aff6809d52881bada3045e6a40c1b23d186d0f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:6d:84:21:ce:49:81:2f:3a:5e:e7:4f:a0:
b1:82:b5:60:73:88:72:32:8e:5e:d8:a8:ab:56:fa:
3b:dc:e1:fb:30:b0:00:a6:00:d2:ae:0c:61:a2:7c:
3a:d1:f3:e6:4c:f4:81:5a:38:06:f0:d1:76:1a:d1:
a3:a8:09:48:19:b9:70:3b:9e:b4:f0:39:43:5a:af:
e3:f2:07:ca:35:da:64:0d:9e:77:0e:a2:f6:82:52:
a2:2d:60:05:aa:53:1a:f4:bc:f0:4f:b5:ca:f3:58:
92:89:62:3c:02:0f:d1:5e:c3:e8:c7:18:52:80:18:
15:fe:e5:dc:88:a0:06:95:c4:2f:d8:77:a2:b1:12:
d3:10:57:1f:97:83:e8:06:87:81:8c:a0:49:68:fc:
84:10:1f:40:e7:9f:63:da:b6:0d:00:01:64:65:0d:
7e:56:88:54:d8:0d:9d:2e:51:1b:18:ae:e4:1c:e0:
4a:55:0d:9b:bf:72:8a:61:76:2e:ba:f4:39:77:8a:
b2:57:fe:d2:16:25:c9:73:5b:69:3e:b7:cc:f7:75:
66:86:f2:8c:56:28:d9:fc:b2:8a:6b:e7:5d:b5:41:
20:d3:9e:e6:67:be:ff:5c:d8:91:b3:ad:4e:e5:b3:
b7:06:c8:02:b4:f1:d5:ec:fc:34:59:fc:ea:d6:b0:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:80:9D:52:88:1B:AD:A3:04:5E:6A:40:C1:B2:3D:18:6D:0F:75
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d9:e8:2d:fe:bb:09:8a:e5:0a:43:5f:d3:28:88:be:72:29:
b7:74:61:af:fc:1f:9b:8b:0e:32:9e:6d:df:7a:bc:a0:70:b3:
bb:58:c4:93:98:bb:62:a5:b7:47:b6:a2:ef:e5:07:03:52:b5:
7d:36:91:da:33:9c:34:3e:81:cd:fc:04:bd:5e:08:f3:41:2c:
38:4a:c5:9e:e1:51:8f:42:89:2e:38:62:59:e0:75:1b:42:b0:
a2:64:c5:93:2f:ae:ed:7a:fe:4b:5a:4e:1c:49:95:72:53:32:
cd:6e:4c:5a:1e:65:9c:b6:a5:91:57:7d:9c:a7:ad:e8:92:e6:
07:ac:fb:0a:55:a3:ef:7b:cb:f2:c4:89:fe:0a:67:29:fc:f1:
9b:d3:5e:e8:fb:bc:0b:da:71:a2:12:e3:4a:b1:f5:f3:ce:c1:
09:fa:09:5e:27:66:55:8a:f2:ce:63:4f:1b:44:66:e0:5b:19:
40:da:6a:9e:7e:e9:4b:02:bc:b1:35:83:05:3a:52:a6:1d:9b:
4e:3e:ea:37:b5:c5:0f:ec:05:20:31:17:a2:3d:ad:84:05:d9:
5f:36:1e:7f:fb:e5:14:11:f3:1c:8d:bd:fb:01:68:25:3b:f8:
c5:6a:73:56:af:86:d3:08:cf:b2:f2:23:63:20:69:87:d9:75:
13:7d:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:22 2025 by rpki-client