Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: 48TMBT+AszuX/QARb5ALX4BDfYLcGLqEtKn2eHGE5/w=
Subject key identifier: 13:E6:B6:33:98:82:59:D8:A6:0D:E2:D4:FE:43:51:9B:82:D8:0F:AB
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 0198D5BB87C1ADBF2A9BE9878328DC6A6727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0F46
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: zx+kKsk3jtFh8oM8GjoNE1618ypaTZoms7f9INQo0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:87:c1:ad:bf:2a:9b:e9:87:83:28:dc:6a:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=13e6b633988259d8a60de2d4fe43519b82d80fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:25:ae:3a:e7:33:61:81:02:c1:4f:0b:31:
80:f7:cc:e8:97:33:85:d2:bd:fa:55:bd:0a:3f:1f:
60:43:98:41:bb:ed:f0:01:eb:eb:e6:9f:17:18:61:
b8:ae:0e:52:53:11:52:d0:4c:43:2b:bb:c5:ad:4f:
64:07:e2:19:98:9f:f1:5b:31:dc:0e:35:d9:c0:bb:
27:58:5e:4b:a7:56:b9:12:cb:b0:e7:9e:ca:1c:83:
f1:3f:f8:b0:21:2a:a8:a9:15:a5:da:da:33:75:ba:
c8:9e:47:69:3f:d1:df:75:aa:c0:ba:83:a7:2b:86:
17:e4:45:a0:98:1c:09:46:7c:9d:61:42:a3:fd:81:
b6:48:31:11:f5:5a:af:77:e8:92:b0:b9:90:3e:7f:
1d:3a:f4:68:b9:7b:5b:fb:1a:3d:e0:e9:44:23:e0:
dc:45:55:75:32:c8:cd:1d:04:bc:13:ce:92:f1:f2:
a8:df:01:d6:00:28:9b:09:70:3d:48:e3:30:99:29:
f3:45:7a:b8:e1:71:3c:ad:9d:ee:77:39:63:86:57:
8a:f5:09:59:b5:99:7c:1e:f8:45:ee:95:90:32:0f:
74:67:7d:93:a4:2c:22:b8:87:86:62:18:3e:05:77:
6f:1e:66:fc:5b:a8:67:b2:a3:aa:d7:d4:ef:3a:dd:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:B6:33:98:82:59:D8:A6:0D:E2:D4:FE:43:51:9B:82:D8:0F:AB
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:77:e1:a4:e1:b4:10:fd:b8:fc:2c:7d:70:c3:ce:d0:cd:
94:3a:43:ee:4a:ac:83:91:09:12:3f:4b:3d:26:24:3b:cb:50:
c3:6f:00:3e:d6:57:0b:c9:d6:1c:98:1e:88:5f:4f:48:f4:0c:
5e:58:9b:cf:44:93:2a:0d:00:58:c4:fe:50:d4:a1:88:6c:4e:
0c:98:30:f0:d2:45:6b:b0:32:91:c2:86:78:2d:ac:1d:bb:76:
54:39:07:c0:c9:f3:16:11:4e:5a:e5:9a:d9:8a:09:75:7d:70:
f8:05:e9:38:f2:1e:8b:e7:17:93:c2:66:46:ea:5f:2c:1a:10:
33:f8:00:e6:a9:0a:d7:15:b1:26:ad:21:dd:11:82:94:27:3b:
77:b0:31:07:ff:13:1a:7f:68:a7:f2:a5:7e:dd:24:55:18:d1:
9d:c1:82:94:bf:15:4f:ea:c8:51:ca:d7:15:d1:c2:41:85:52:
b3:99:09:01:4e:27:dd:28:ea:e1:f1:f8:15:11:a6:7b:9f:48:
6e:64:a6:a9:b1:36:50:1f:94:fc:5a:6d:dc:13:8c:93:b9:75:
eb:69:e7:25:2b:cd:c2:4c:96:2e:6c:e1:db:e5:cd:08:42:b8:
1d:e3:e6:b4:f6:ea:91:d9:4b:10:77:82:57:e0:2f:68:eb:c0:
08:cc:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:27 2025 by rpki-client