Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: fed7UMgT7V4Gpb9bD9p/tWlMNiH2n6GvD2Zr+OaTDwA=
Subject key identifier: 5E:31:B9:8F:9F:19:46:DC:06:AA:11:32:AF:A1:AF:1E:F0:7F:36:47
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0198D8BD8264C7E3F33A2C8AF9294AA229D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 21:02:34 +0000
Manifest this update: Sat 23 Aug 2025 21:02:34 +0000
Manifest next update: Sun 24 Aug 2025 21:02:34 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: IiObWDPXNC+Arbez4TayT8b0rtkkymCvEqs+UmjDNVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:82:64:c7:e3:f3:3a:2c:8a:f9:29:4a:a2:29:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Aug 23 21:02:34 2025 GMT
Not After : Aug 24 21:02:34 2025 GMT
Subject: CN=5e31b98f9f1946dc06aa1132afa1af1ef07f3647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:4a:1b:27:3c:30:93:27:89:e4:4d:4e:54:
53:8e:b7:d7:1c:2f:d4:bf:72:43:bb:6d:79:fd:48:
44:dc:33:5d:00:c0:a1:2c:b9:f5:b6:93:7d:cc:05:
48:68:fc:87:1c:08:47:f3:00:f0:29:54:4d:e8:31:
64:41:24:c9:09:38:4e:6b:69:87:0c:db:61:6e:1d:
02:e0:da:bd:c5:92:0e:b0:a9:92:c7:9b:73:d3:49:
7d:55:60:90:f8:bc:3f:4b:e7:ac:c4:6e:71:04:b0:
b1:e5:66:56:61:72:29:e2:12:bf:91:41:27:ce:e5:
1e:42:ab:3b:7a:7d:1d:ec:64:8a:26:69:89:b9:66:
0d:04:28:d7:13:6d:8c:75:f2:72:d7:ba:ef:07:e0:
7e:de:42:57:cb:1a:1c:db:90:3c:e4:45:dd:ab:3b:
27:57:38:53:f0:df:fb:07:51:63:3e:a1:0a:e4:a1:
bc:a7:20:e1:7e:e6:e6:84:13:a2:d2:c2:c9:a7:10:
0c:3e:bd:aa:cd:70:0b:8a:73:8c:8d:98:86:1b:d7:
ec:44:ac:ab:09:f2:0d:b2:41:8e:7c:bf:50:d3:4b:
14:10:c4:e7:a2:22:1a:0b:ae:c3:3b:3f:ee:00:e1:
16:22:f5:31:f8:ab:95:ea:46:0f:b5:6b:3a:5f:ae:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:B9:8F:9F:19:46:DC:06:AA:11:32:AF:A1:AF:1E:F0:7F:36:47
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:c7:fe:81:d4:bc:26:b0:93:e1:f8:51:a7:22:38:1b:0d:
ed:64:95:83:27:25:f6:a0:af:16:c4:0a:ef:e9:46:51:ca:0c:
46:f3:a1:77:6c:8e:be:6c:85:a4:2a:c7:55:04:cf:b0:29:31:
a2:3b:0d:d8:14:e8:3b:bb:4e:78:6c:5b:c4:92:bb:ec:18:e9:
7f:38:93:30:83:26:f8:8d:ce:f9:52:67:4b:4f:8d:1c:e0:ef:
a5:fa:6f:ac:cc:34:dd:cf:f5:16:06:87:8a:7c:ea:f1:e3:98:
8a:d2:c2:ca:25:91:55:6e:c9:db:a0:ad:b9:f4:24:6c:4f:0d:
7c:90:dc:cc:4f:80:bb:5e:f5:9d:66:c1:f3:fe:f4:6a:af:b8:
9d:f6:80:84:6a:77:bc:70:4c:4e:5a:16:7e:76:73:8d:60:f1:
84:05:d4:db:70:d3:dc:92:50:c8:cc:f3:d9:28:15:93:8c:cd:
ea:c5:c8:09:29:4a:11:e3:2d:2f:8c:8f:7d:b3:ef:97:b9:e5:
52:df:79:9c:89:99:24:7d:bf:39:db:62:a2:90:ae:c8:90:6f:
fe:a1:5a:54:e5:3e:91:86:0e:d7:83:d7:22:53:0e:f8:ae:54:
de:6c:b9:7d:ad:45:85:e6:7c:e6:11:65:4d:b4:ce:13:16:af:
1f:09:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:30 2025 by rpki-client