Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: H0nUkJYiadc9c4Npz9Zp6BhJkyhU5VgSPkmrvaoNu38=
Subject key identifier: 4F:71:96:2F:35:9B:74:31:D8:49:25:20:6F:D4:94:D7:F4:76:8D:7F
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0198D6606E7FAC7190EB84541616F8E7991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: m7VoAr30H8HdV+UM+KtYS7vszEAxwsi2WeqSL1CxvH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6e:7f:ac:71:90:eb:84:54:16:16:f8:e7:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=4f71962f359b7431d84925206fd494d7f4768d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:7d:42:00:08:87:4e:12:2b:16:1e:d3:41:
d4:05:3c:7b:26:7d:57:00:44:d7:de:e2:7d:1b:11:
f0:a8:ea:6a:ff:0a:1f:ad:83:ba:24:43:ca:da:45:
c9:a2:fd:45:d3:bc:de:95:20:e9:1b:cc:9a:48:da:
34:89:f7:a4:c9:ff:e0:32:40:db:2f:ad:30:48:c5:
ac:46:2d:0e:9d:a0:98:fd:dd:be:a2:bb:b0:07:01:
eb:9f:52:fb:04:05:86:98:8d:9a:f3:4a:38:72:0f:
95:9e:60:e2:6c:ff:a1:cd:8c:05:c6:e9:06:0a:68:
1e:1d:08:e1:0d:1e:39:18:75:1a:9d:d6:04:e2:29:
16:45:63:41:bc:93:be:3e:f4:6c:c4:29:a0:4d:31:
b6:df:e8:ff:5a:5a:37:86:7e:1d:09:0f:f2:f8:8b:
a5:df:f6:48:10:23:e6:e2:d2:bb:4e:9e:e7:15:38:
a2:30:dc:28:91:b2:c0:05:ed:4b:6f:15:d7:a4:95:
5e:18:4e:91:fb:24:66:c1:ec:52:51:2b:2a:60:fa:
87:e8:15:01:6b:68:6f:89:62:07:14:21:38:a4:32:
18:eb:77:22:c7:6e:19:ca:9d:35:23:8b:f7:29:6d:
90:9d:c4:93:cb:a6:09:35:bb:7b:cd:10:b0:37:e9:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:96:2F:35:9B:74:31:D8:49:25:20:6F:D4:94:D7:F4:76:8D:7F
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:52:63:70:8a:8b:e7:c1:46:4e:30:90:8d:cf:80:af:4b:
87:04:01:58:ad:64:a3:22:3b:a2:0d:dc:11:cf:d8:af:9d:f0:
f3:87:33:6b:8b:17:c4:1e:9e:42:93:85:83:5e:19:89:db:c4:
e3:49:95:ee:a8:8c:da:3a:18:51:43:8c:f5:81:ec:2c:cb:21:
04:c0:d4:90:50:34:bc:2a:b3:6d:bc:ad:ba:aa:3f:66:48:9d:
7f:28:8c:54:db:c3:c5:91:38:57:86:b5:b3:43:34:29:ab:75:
46:da:f0:90:54:46:49:ec:88:e5:88:c5:c2:ed:cf:48:77:74:
99:5d:6f:7d:ef:ea:4b:87:f2:14:43:fa:8b:b7:6b:03:70:71:
83:f3:1a:8c:39:1a:1b:39:66:86:a2:90:fc:25:2d:3d:c6:bb:
b6:3f:25:30:83:f2:a7:86:c3:33:0c:ab:9a:fd:8e:f0:41:79:
93:af:59:91:f5:09:a5:f8:e3:02:07:fe:79:18:bd:3f:2e:f9:
e8:a1:0d:b7:4d:68:e3:f6:cd:83:18:38:b3:10:f9:f1:6d:0e:
c2:4a:16:ee:9b:84:4a:4a:9b:2e:ff:51:72:44:b1:01:ab:ec:
cb:9b:b6:7d:88:65:43:ad:b4:43:74:a7:8a:ac:62:5d:a5:69:
bd:0d:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:18 2025 by rpki-client