Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: Zz95wZvSi/9uS68AaV9sdnzHTf/5+MZW80AQVBFoTJo=
Subject key identifier: BC:61:DD:24:01:04:56:C1:16:C3:B3:67:18:13:E9:84:FD:3B:33:C7
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0198D54E22E74EF0A22FEEDA9D566489190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 146B
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: 4jGF3MUPicJv+G/6TAo63YTcppCtMXEtJbK26vA81LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:22:e7:4e:f0:a2:2f:ee:da:9d:56:64:89:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=bc61dd24010456c116c3b3671813e984fd3b33c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:03:97:f3:7e:ea:ee:97:22:4c:ba:dd:1a:d2:
c3:94:7a:ce:a1:cb:d7:df:f1:10:a0:c0:98:be:72:
0e:29:5e:f6:e7:be:fb:a5:a0:47:46:db:37:e2:b1:
06:2b:eb:f7:bd:06:1a:8a:0f:cd:78:53:95:c6:08:
d9:9a:8a:f8:7b:22:95:ff:e8:cd:b9:f1:32:c9:91:
1d:9f:92:07:11:77:99:e8:f2:c4:bb:1a:d3:bc:9e:
fe:e9:1b:f9:7b:08:9c:87:ba:1b:ef:c3:fd:00:7a:
27:b2:60:a9:a4:0f:6b:23:7a:a1:da:d3:78:4c:0f:
e0:4f:bc:df:6c:8d:dd:30:5c:0c:e5:11:32:85:b6:
79:e8:1e:58:96:8a:f2:e8:45:d7:4f:79:83:01:5c:
fb:30:9c:51:a7:ff:a6:c7:be:ba:d3:ed:f8:57:61:
01:38:84:39:15:ba:15:5a:29:b5:bb:df:31:f6:91:
5b:fc:ad:ca:2a:91:f5:94:64:4a:d5:28:8f:40:1a:
c8:12:15:7b:91:7d:d4:f4:ff:19:3f:16:fb:49:47:
62:9b:3c:af:89:6e:6d:24:2f:41:b2:a4:07:17:2d:
15:29:3e:9b:8e:8d:71:f5:07:90:9d:1b:98:4c:e4:
48:7e:bd:68:18:8e:ed:91:84:cc:5e:db:db:0d:da:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:DD:24:01:04:56:C1:16:C3:B3:67:18:13:E9:84:FD:3B:33:C7
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:36:2d:2f:49:9c:a2:24:4d:19:eb:ef:92:66:9c:06:38:19:
3f:80:ae:42:36:b8:9d:28:39:49:59:d1:db:a3:ff:57:38:11:
16:1b:3c:25:5d:69:86:18:44:cb:da:99:cd:63:d4:8b:56:e7:
65:e3:12:4a:94:9b:a1:5f:8f:c3:0f:77:4b:5d:a4:c9:9b:b8:
f5:3e:40:09:28:9b:5f:ca:61:62:c2:80:25:03:0c:9f:a4:b7:
a3:57:e3:d7:ab:d3:f8:95:4b:5d:f4:2c:34:cd:cf:e3:a6:6e:
86:9f:39:eb:05:a2:c1:92:f0:ce:db:10:e9:b0:4d:58:b1:6b:
e4:fc:65:ab:4d:74:f7:19:9b:ad:e8:5c:d9:ec:75:cc:a0:6f:
74:b2:73:83:e2:e9:63:c8:cf:4f:79:73:ec:aa:2e:f6:f5:2b:
92:66:39:a7:8d:b3:0e:57:27:f3:e4:82:6f:fb:d9:36:f6:80:
82:72:c0:c8:6d:b0:53:68:ef:04:99:d9:1d:6e:5d:42:fe:ab:
74:d4:37:fa:d9:cb:a3:bf:a3:89:1a:82:88:cb:de:68:be:e5:
1a:d6:57:c2:85:92:1c:d5:ac:73:a5:0d:85:0d:97:60:90:5d:
e1:d5:af:5f:1b:66:9c:bc:68:ea:16:c8:e3:11:b0:b2:77:37:
64:60:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:36 2025 by rpki-client