Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: dUXOmy71hK/c5GV9xxq6D85kv8pRXcpijOEc/gWjMDM=
Subject key identifier: 9A:1F:9F:5A:8B:63:5F:25:0F:2A:97:EC:8E:05:74:09:B5:B8:90:C6
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 0198D4E0D1742C65934137F5BEF8064CD8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: kQbwEcewPS2mzytq7PrV2Sukk7USsc32CJ596DROfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d1:74:2c:65:93:41:37:f5:be:f8:06:4c:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=9a1f9f5a8b635f250f2a97ec8e057409b5b890c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:91:5b:82:c4:a0:64:6a:a3:01:e8:58:bc:
0b:3e:d9:58:c0:ff:29:13:87:7e:d9:8a:2f:ff:5f:
19:90:43:53:41:3d:c0:32:b3:3c:25:c9:89:ac:db:
79:24:f2:64:69:ab:9d:38:4c:74:eb:6d:04:e1:22:
1d:f9:1e:89:93:83:14:84:a6:2c:e9:c2:1c:b2:34:
6d:9e:24:86:50:60:89:52:a3:f2:32:e6:4d:00:b9:
61:9c:9d:da:81:33:f0:85:71:20:49:0a:20:d3:9e:
1f:74:a9:c7:a3:2d:36:da:c6:eb:8c:a1:93:f9:95:
1c:c5:f9:5d:66:5a:fd:9e:4d:99:32:4a:a5:2e:38:
eb:35:2b:93:eb:39:53:1e:b1:e0:a5:8f:ab:5f:b1:
90:a4:ff:12:df:a9:08:b2:37:5c:58:1b:fc:8e:99:
98:5f:22:e3:0e:ad:2f:06:00:7f:0a:8e:bf:f7:c4:
ab:49:c4:35:93:5e:30:ba:64:0e:5e:89:dd:cf:b8:
d2:78:24:76:37:cb:ac:b9:ce:c0:dc:51:19:e7:29:
c2:c3:7a:95:50:ab:2c:06:d4:f7:db:f5:ea:34:7b:
32:c4:98:6d:be:cc:38:5e:2b:96:bb:c7:c0:74:02:
3d:01:0a:b0:a5:3b:af:97:80:f1:0f:72:ac:1b:e8:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:9F:5A:8B:63:5F:25:0F:2A:97:EC:8E:05:74:09:B5:B8:90:C6
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:40:b9:19:e3:62:64:ce:b6:60:de:85:cc:df:75:77:33:99:
04:f2:54:ef:27:35:7a:26:0a:bd:a1:eb:8a:da:c4:c6:4b:bd:
0c:76:6e:f0:74:89:a2:08:32:93:18:33:ec:e2:9c:ab:54:c0:
b5:c4:84:54:80:ce:47:7b:d1:1d:08:c7:1e:35:12:51:bf:ba:
2d:c1:d9:93:00:ff:ff:11:4e:94:3e:9e:50:05:74:31:e8:26:
90:8c:51:72:1b:3c:34:e9:5f:94:ad:fc:cb:9d:a5:2f:7e:52:
ae:5b:9b:f4:95:dd:c9:03:76:50:f4:36:9b:d7:ec:fc:f3:4f:
05:18:ab:97:35:34:de:a9:3a:ab:0e:0f:e5:73:aa:e0:51:85:
5e:c5:b5:74:44:d5:1c:1c:ec:39:68:97:05:d9:5f:df:cf:e4:
9e:5f:ea:0b:99:99:34:0d:88:9d:55:10:1b:55:b1:02:27:d2:
73:0f:a6:b2:85:6d:06:a6:d5:c9:75:c9:8d:6b:4c:69:df:1f:
cc:5c:d5:2c:0f:06:3f:cf:5d:ed:00:49:6c:19:48:67:38:ed:
c4:fd:9f:0b:02:26:c9:55:3e:1e:21:81:5c:27:6f:56:f3:d5:
4a:4c:d0:62:3e:42:bc:d1:72:64:a0:63:39:f8:f4:13:19:4a:
05:4c:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:52 2025 by rpki-client