Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: ha1M25O+zEbqL1aeYezaEBaJuR0StQ+HvVIetUxgfSk=
Subject key identifier: 56:47:D8:7E:2A:54:F8:45:F7:9C:90:32:1D:E0:93:CB:15:F2:63:DA
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0198D472DC3986612CF7C7D1B1A50D96AF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: yvGlyDenD/LIpacemwlTxSCTtQzEK5TTunWY5J1sFPg=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:dc:39:86:61:2c:f7:c7:d1:b1:a5:0d:96:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=5647d87e2a54f845f79c90321de093cb15f263da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:b3:09:0f:44:64:6b:37:2b:d2:b4:45:ea:
76:53:f1:0d:d8:95:f5:52:e7:d9:8e:02:92:7b:81:
d4:f0:2e:78:11:75:83:bd:bb:4e:bb:6a:cb:2b:ae:
60:62:41:99:61:fa:15:12:bf:c8:51:b5:54:db:5d:
23:c8:8a:6e:4b:4a:38:9a:12:17:1f:d1:9b:d4:2a:
a3:53:d1:9d:90:9c:db:c1:3d:01:3f:c8:06:67:b5:
d2:0b:36:40:0f:28:bb:2c:ab:f7:d2:0a:c7:84:64:
84:01:0d:66:b1:dd:3a:eb:ce:99:cc:51:46:e6:5e:
5f:30:8e:4e:55:a0:76:fa:56:b6:74:1e:56:16:4e:
f0:28:91:64:d0:c2:0e:f9:2a:7a:ca:46:1d:46:2b:
c4:8e:27:30:ba:c7:c8:ae:71:76:76:82:e7:9e:1f:
5f:7b:65:c5:47:40:6d:cc:08:11:d5:53:c9:2f:e9:
e7:1c:84:b8:1d:cb:79:f4:14:5e:8c:ae:11:05:b9:
e5:ea:d3:12:9c:ae:47:1b:15:cc:fb:a2:df:b8:6f:
d3:59:07:77:c1:5a:c1:cc:2c:45:19:e0:c4:42:56:
59:ad:48:b5:51:05:34:f9:5f:0b:82:6c:67:ba:c2:
66:15:f0:ea:b8:3b:fe:65:03:bf:c6:dc:5e:9c:9d:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:D8:7E:2A:54:F8:45:F7:9C:90:32:1D:E0:93:CB:15:F2:63:DA
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9a:63:98:2e:13:bd:cb:2e:6a:2a:55:81:0e:d4:05:23:85:
a8:99:75:3b:11:b2:f0:47:8f:85:a2:06:39:8b:29:bc:3f:6b:
8d:9b:b9:d0:2a:d1:6d:c1:d3:a2:f4:80:2d:c6:10:e2:f4:da:
30:01:88:58:fe:6d:7b:97:cc:0f:6a:94:2e:ae:ce:62:2f:05:
2a:e8:d7:c6:1e:3e:4e:b4:54:31:19:95:f7:18:b1:b6:67:3b:
a6:6b:4d:b2:7a:01:42:9c:46:b5:49:a3:1c:55:6a:8f:45:df:
92:92:ef:8d:45:fb:89:14:80:0d:09:fe:07:98:46:78:9a:61:
c4:dc:82:bc:49:7f:29:8f:8f:08:5f:7c:03:c5:0d:1b:d0:b3:
77:af:47:89:c9:c7:6b:fe:28:bd:fb:47:32:24:4d:e8:69:20:
d4:2b:de:23:29:35:99:b4:bb:3e:ef:4a:60:31:f4:65:1d:32:
c1:cf:7d:5b:d1:73:1f:1c:f1:a0:26:f4:f6:48:5d:0f:e6:c9:
20:fc:b2:14:19:b8:3e:db:ce:f6:83:01:ae:09:f8:58:81:a7:
8b:c2:15:e0:a0:11:c9:ce:35:46:88:17:44:1a:57:22:5e:f7:
c3:38:d8:ff:69:cd:48:76:83:c5:ee:b2:27:9d:13:33:cc:de:
49:43:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:18 2025 by rpki-client