Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: hh6b492q6zkDJHK22qCsDjBqQn8jJEV4v7sQgPXrxyg=
Subject key identifier: 3B:C0:F1:E3:E4:31:80:AE:CB:61:46:5B:9B:5B:1A:1C:3A:F2:3D:00
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 0198D5BBF495473CCFD522DFEB0EB4E1E856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 08D1
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: xhXZpjSvvaxpM2dbXmcToBWwHrMTDPUOxK/iDXoIa38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f4:95:47:3c:cf:d5:22:df:eb:0e:b4:e1:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=3bc0f1e3e43180aecb61465b9b5b1a1c3af23d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:98:87:52:04:88:a8:a3:62:ec:f9:89:8d:
95:14:65:94:46:46:fc:a3:7d:ec:ac:65:74:92:1f:
d6:0e:07:0a:6e:5b:34:b4:63:8d:f4:5f:16:66:23:
ea:9f:ef:10:46:25:18:18:9c:08:ab:e4:8e:02:54:
b8:cf:b5:88:30:89:9c:7d:1e:68:56:89:f3:71:fc:
b4:d7:7d:85:5c:77:3a:99:e6:ee:0b:74:11:db:40:
8d:d8:6d:0d:ae:9b:bb:87:48:1b:9b:9e:26:a4:87:
5d:45:f2:0a:08:15:d0:28:85:f6:de:1a:7e:ba:6d:
b8:c2:c1:ae:45:c2:5a:9f:27:5b:80:ad:4d:80:13:
e6:d2:32:2c:63:78:4d:e0:7e:37:14:e1:e2:03:09:
40:67:72:8b:16:36:51:6e:d0:24:39:a4:68:a2:b9:
99:2d:d5:e5:81:48:fb:6d:98:4d:b1:40:78:25:f2:
2b:ad:ef:53:b2:12:a0:a3:50:69:24:b2:85:b2:04:
ba:75:c3:8f:33:e6:92:12:dd:0c:d9:34:61:dd:1e:
fb:a9:73:ed:81:c7:e3:a6:f7:d9:f1:94:9b:fe:54:
59:b0:3a:1f:a7:ea:ef:53:0d:b7:78:e2:25:72:35:
56:80:e3:d9:79:fe:bc:e4:2a:da:7c:42:79:21:50:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:F1:E3:E4:31:80:AE:CB:61:46:5B:9B:5B:1A:1C:3A:F2:3D:00
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:be:8c:0c:ba:95:10:17:17:01:1a:65:19:09:44:b6:44:
cc:c7:42:dd:fb:eb:13:e6:20:4e:09:2f:52:6e:e5:4b:f2:a1:
75:39:86:4b:bd:24:70:56:8e:83:4a:1c:bb:02:1d:88:95:27:
79:9c:9e:79:e4:0b:79:fc:b0:91:d7:c1:48:f3:01:2d:a5:ae:
35:da:c6:88:fc:d8:26:1e:aa:66:70:39:f4:e5:cf:e9:57:6e:
06:ce:76:ee:8f:0c:5e:7e:ff:b3:3d:5e:c4:e1:79:b6:f1:fa:
cf:30:10:69:6c:21:65:a5:1e:f3:64:67:d9:46:bf:ae:28:34:
1a:5e:45:db:1c:db:fe:a9:79:11:ac:71:02:ec:07:d8:e8:08:
c4:01:d8:90:83:6a:2e:fb:fd:19:9c:b3:20:84:54:39:e1:65:
33:0d:12:c6:ed:c0:f8:87:b0:81:1c:7c:e9:37:fa:30:e2:37:
ef:19:ae:74:34:0c:22:83:36:5a:24:ab:75:c6:94:2a:a7:7c:
94:55:e7:68:14:1f:0c:50:bd:81:bf:2a:0a:c8:b7:26:e8:d7:
07:d4:08:25:21:d3:60:c5:b8:27:66:22:be:13:6c:e5:06:99:
c6:aa:17:bc:4e:88:ff:70:79:b8:08:4c:4f:b7:f6:55:81:b1:
64:48:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:24 2025 by rpki-client