Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: dVvr9z838pgCOkT2w7OGtR62d8scA3/ApzSLvCT3umo=
Subject key identifier: 5D:12:E4:1F:26:60:A1:5D:88:78:06:EE:62:0F:06:EB:59:CB:19:63
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 0198D5838AAF133DAFF714893DE3CC115180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: A1Z/99dQ/Yaj26RadTscCubPqvW5Tw7c7Oagfj504o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:af:13:3d:af:f7:14:89:3d:e3:cc:11:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=5d12e41f2660a15d887806ee620f06eb59cb1963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:19:36:25:51:25:30:43:f5:65:1c:7d:d4:
77:bb:bd:57:ad:d7:4b:a1:29:b1:9c:7b:35:11:b9:
02:fa:2e:84:d9:f1:e3:6f:6b:68:90:14:8f:34:7a:
12:76:0c:09:60:ee:a7:48:b3:8c:0d:cd:75:ad:48:
e1:0d:78:f6:e4:5f:e5:b4:e9:89:f1:a5:f0:eb:2c:
35:ac:69:53:3c:44:bc:0d:d4:cb:5c:8e:36:df:dc:
28:51:22:9d:83:8d:f3:45:f5:e6:f3:04:5b:9d:08:
e1:97:f7:fb:db:b6:13:fc:79:ac:a0:9d:13:9a:62:
24:77:da:9c:ac:5f:9d:8a:d2:26:df:53:fb:8f:4d:
0a:b4:0e:f6:44:28:5b:75:63:6e:cd:79:f7:fe:d7:
a3:7d:63:51:65:0b:89:63:9f:6e:b2:41:28:f7:bc:
1e:85:e8:ff:1c:92:c1:37:68:30:7c:7d:26:3b:30:
7e:06:e7:4f:2e:e3:0f:c9:76:28:be:56:9d:3a:eb:
71:30:57:2c:9c:40:07:26:ea:40:cf:86:e3:a7:bf:
94:cf:3d:e5:74:dd:9a:1b:35:47:29:96:74:1f:5c:
ee:de:ee:b1:34:90:c8:30:9b:9a:c3:aa:e7:be:a2:
eb:fc:3e:93:d0:01:9e:7f:50:a6:cd:0c:cf:1b:10:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:E4:1F:26:60:A1:5D:88:78:06:EE:62:0F:06:EB:59:CB:19:63
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:06:99:d7:e7:69:5c:fb:ec:ac:5f:19:7e:c9:a6:47:1b:
f3:ef:c1:eb:19:d2:15:5b:4a:19:06:84:e2:42:0b:5a:66:e7:
3f:fe:29:80:19:55:ac:ca:6a:4a:2c:59:ca:d7:12:e8:b1:45:
ae:82:cb:a9:cb:74:50:9d:02:63:94:3e:e0:45:8a:03:e2:41:
e6:0f:e5:45:18:22:56:92:41:f6:f2:aa:9e:54:fa:85:e9:48:
65:ee:00:af:8b:63:95:f7:8b:bc:60:ba:e4:5d:bb:9a:3c:30:
83:fd:a9:13:f6:b4:7a:ae:bd:3e:8c:12:55:7e:01:be:33:e5:
48:18:82:bc:28:3f:d4:fb:47:b0:a1:c2:5c:be:95:7e:38:f8:
ce:73:42:95:cb:58:96:c6:7e:79:0c:7c:ef:b0:e3:d7:f2:f5:
29:15:a0:30:99:2b:d7:f5:a2:72:12:70:be:4a:10:23:96:cd:
e9:43:fb:c9:7b:31:33:0b:52:09:17:aa:20:51:94:9a:0c:42:
1c:c3:55:44:48:81:81:31:d5:78:9e:38:46:44:90:01:ae:39:
cc:e3:e9:9c:77:8f:74:89:38:cf:25:a3:96:30:5b:ab:c6:d7:
04:46:59:02:91:28:11:f7:51:1d:54:5a:12:6f:12:1a:94:7c:
40:86:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:50 2025 by rpki-client