Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: u50oWEfKTIljuVhWstBnWVV2SHWW3WUd/NNL3SxC5qI=
Subject key identifier: 30:CE:2B:5D:CB:64:02:1A:2D:59:1E:4A:4B:D6:F3:33:23:63:84:9C
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 0198D4A7A432447DC5829F296B5B3D7CFFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 01BE
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: 1-MrWjx41MLE2Craolgg-haNHa9U.roa (hash: tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: 0tIumbz/wvxktJ7oQ7uSmx8clvKYxePFp38w7RmTeL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a4:32:44:7d:c5:82:9f:29:6b:5b:3d:7c:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=30ce2b5dcb64021a2d591e4a4bd6f3332363849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:ba:31:49:72:17:f7:56:30:12:74:d5:ae:
13:87:73:52:73:04:4f:4a:4d:40:75:9e:37:40:fc:
fa:70:22:61:2c:a9:7a:c5:37:55:e6:40:d4:fb:d3:
ff:ac:94:95:c4:bd:59:fa:66:b1:9a:98:fa:db:ea:
f5:3c:13:4b:fe:a0:76:53:de:5a:6a:1b:e4:68:26:
98:a4:56:64:9f:ec:0e:dd:0e:a0:6b:47:81:4f:88:
fd:0a:58:38:c8:ff:55:44:1d:e7:42:4a:d3:49:16:
a1:93:fd:45:14:d0:21:03:5f:e2:5f:28:ff:8a:11:
3d:e0:0f:18:44:1a:9e:31:75:ef:78:9a:9a:c4:fe:
86:fa:1b:b4:4f:1e:9e:f7:bd:32:bc:96:94:3f:08:
e0:a0:1b:48:2f:bb:1c:50:72:e7:9b:bb:2d:0f:88:
40:ee:2c:4d:6d:55:1e:e8:48:2c:44:4d:61:b5:4f:
c1:ab:86:16:62:f5:ed:86:e8:32:41:28:36:9d:a4:
09:bd:74:b9:65:23:e4:c1:06:6d:4e:78:54:70:c1:
af:17:8d:52:ff:e7:97:88:95:e8:05:a5:7a:5e:48:
fa:8a:40:15:73:42:ae:74:a6:43:60:b9:10:f9:04:
3c:90:91:55:78:89:cd:5e:3f:cb:53:c5:a1:b7:f5:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:2B:5D:CB:64:02:1A:2D:59:1E:4A:4B:D6:F3:33:23:63:84:9C
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:62:c0:a1:e3:b8:b1:03:f3:c6:68:0d:dd:99:8a:34:0f:
9b:c9:0c:16:e8:21:aa:b7:c1:11:0d:31:13:c5:94:49:04:fb:
b1:f8:3d:71:c0:c2:65:16:b5:80:de:b0:93:64:e7:e7:9e:aa:
23:93:83:7f:bb:2d:b5:d7:33:9b:26:e8:54:2c:a5:64:bd:ff:
76:c8:81:96:e8:17:77:29:79:1e:d1:03:87:25:10:0b:0f:7c:
44:9e:be:be:22:12:c6:59:96:a9:5e:b2:70:3a:ab:d7:75:b0:
7e:dc:1a:80:29:76:a8:d5:1f:11:c5:ab:71:d3:30:14:e6:42:
01:b2:c0:e3:9f:1c:cd:93:33:19:b4:1f:36:d8:54:3b:dc:0f:
e9:b6:d9:e4:37:9c:fa:be:f0:ec:23:1f:60:d3:6b:54:e1:5a:
f8:2a:f3:c9:43:e7:40:af:3b:5b:06:98:65:b8:e7:90:4c:5e:
51:5b:a7:db:a3:89:3b:aa:32:49:d3:a9:fc:39:5c:d0:16:2b:
83:98:ca:eb:03:3a:6f:85:82:a4:a0:3c:b8:b8:64:a5:14:63:
1f:11:f7:da:14:cc:1b:f8:c8:50:f4:62:e4:f5:7e:fa:72:72:
d7:37:62:0c:bf:80:58:f2:54:2f:20:7e:11:d2:fd:82:b9:1b:
d7:51:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:55 2025 by rpki-client