Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier: 36NAmCsx5q2BUTEFjq3XzWjZbRFVnw2WWq53UJTsO8o=
Subject key identifier: E4:A6:90:82:F6:8A:A8:83:E4:F6:01:01:2A:60:77:1B:A5:99:B3:35
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 0198D54DD0B2391ADDB4018F0FEEC96DBD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: KWbEbWMWx8GsR8Asb1Hi7iVj3A8.roa (hash: w7QiyqZy99cacAStF09i7GMZP3QKH24tEZwntPEoeMs=)
2: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: QC8KAxIoW4d5aGg4avdaDkMDPGBeCqpGYSdCSKmIaVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d0:b2:39:1a:dd:b4:01:8f:0f:ee:c9:6d:bd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=e4a69082f68aa883e4f601012a60771ba599b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:b3:41:35:7f:72:9f:c9:39:84:e3:c0:23:
30:97:8a:c8:7d:b2:aa:c8:a1:47:44:a2:75:d5:3a:
62:c4:67:27:be:7c:92:5b:8c:4f:bd:d3:1c:12:c2:
84:49:44:ac:96:ef:41:14:16:9b:b9:2c:6b:42:99:
98:c4:3d:b7:b1:cd:59:11:b0:b7:76:27:60:3b:84:
7d:20:72:b8:1e:1e:f5:7a:75:0d:12:cf:af:92:96:
2e:5f:58:be:3a:55:b5:42:9d:05:b2:2b:a3:c7:5c:
0a:1f:05:87:63:be:17:d3:93:ad:79:bf:9f:2d:7c:
98:fe:2e:c4:43:62:a0:ef:40:37:1c:d9:f3:e6:9a:
c0:db:00:e9:b8:a4:cc:ee:7b:45:90:11:db:a7:af:
c5:3a:9f:07:0e:e8:8e:16:54:8a:54:95:67:15:0b:
bd:02:72:88:9a:6e:87:ac:be:84:53:28:df:5e:9e:
93:f3:bd:2d:b5:2e:8f:fc:95:ea:21:74:02:68:e2:
f5:b1:5e:3d:ce:9a:da:8a:41:29:97:0e:ba:66:c5:
11:82:ad:19:99:a2:1c:6a:13:95:24:7f:47:eb:55:
0a:24:b4:cf:50:17:63:14:7a:c9:98:66:60:40:d3:
63:61:e1:64:4c:94:08:a7:21:20:ac:e8:2d:d5:05:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:90:82:F6:8A:A8:83:E4:F6:01:01:2A:60:77:1B:A5:99:B3:35
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:ea:ab:2b:97:9b:41:f0:b6:c9:4e:b5:18:00:6a:ab:29:
d6:23:fa:6f:d5:3c:b9:9e:b1:3f:a5:67:b1:d8:e7:22:f4:e8:
bc:5b:2b:f9:02:24:4e:c5:2f:78:5c:5b:2c:67:dd:ae:5c:49:
eb:92:0d:25:8a:e6:fb:9a:2f:22:18:53:b6:27:5f:91:fb:87:
41:79:39:d1:3c:5a:94:32:36:33:28:af:5b:81:59:f4:23:36:
f3:d6:11:9e:11:1b:7a:96:ac:6c:41:a4:0a:74:b8:65:92:1a:
f6:4d:e3:47:db:52:68:f7:54:e7:d6:44:fe:56:1e:cc:dd:4d:
11:6b:98:ce:9a:d9:32:d3:66:91:71:4e:8f:5c:a3:c3:fa:a9:
20:40:f0:72:9e:ec:27:63:bc:8f:7f:2e:6e:e1:4a:69:04:fe:
4f:5f:6b:4e:dc:45:6d:31:fd:45:83:05:76:aa:3a:67:65:09:
9c:7e:cb:0d:38:e5:43:08:89:dd:16:6e:47:8f:c9:e4:3f:be:
07:25:3b:2f:3e:a0:1d:0c:be:c5:14:60:53:16:f3:ca:2b:94:
5f:1c:59:ed:9c:25:16:7b:09:01:34:3d:cd:45:28:4e:6e:1a:
39:7a:61:93:7a:73:e2:2e:a7:c6:59:1c:d2:68:c0:78:42:cd:
23:2e:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:02:53 2025 by rpki-client