Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: gd4OyfNYeT8JnCtI29DEYmvArJS3G6dg3xc5O29BigI=
Subject key identifier: 26:F9:B7:15:62:DD:35:4D:F1:34:29:1F:B3:01:70:6A:29:38:C1:7D
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 0198D4A795326D096DEA0686FBB362DDF668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 02:00:08 +0000
Manifest this update: Sat 23 Aug 2025 02:00:08 +0000
Manifest next update: Sun 24 Aug 2025 02:00:08 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: EmOMrDKt12dt5ZDsOUwqqqBkPC12wOS+EsmnTdhNLok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:95:32:6d:09:6d:ea:06:86:fb:b3:62:dd:f6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Aug 23 02:00:08 2025 GMT
Not After : Aug 24 02:00:08 2025 GMT
Subject: CN=26f9b71562dd354df134291fb301706a2938c17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:ff:a0:92:25:61:e5:6f:05:60:ff:25:cc:
2a:08:5c:03:d1:ad:4f:d5:28:d7:a3:86:3c:1f:b5:
00:e0:bc:96:f3:57:c0:d1:78:d8:5f:b6:e7:44:cb:
90:02:13:85:aa:73:7b:43:ff:c7:8a:51:71:0a:90:
15:30:fb:54:2d:ff:fc:c0:04:d7:f9:26:13:91:b8:
ad:93:af:29:e4:7c:92:cd:0d:89:a8:92:e4:60:21:
a3:42:c8:4b:da:68:b9:62:30:4c:24:31:56:ee:57:
66:91:8b:73:18:5f:c7:6b:b3:77:7f:c6:18:8e:78:
81:0a:a6:70:86:a6:fc:33:71:e3:d9:95:28:fe:72:
32:96:4a:a6:09:ea:6a:5d:03:70:bc:e7:af:4a:a6:
68:d4:65:62:fc:9a:20:f2:77:59:89:da:78:27:03:
e2:f2:b2:f9:3a:50:7e:44:2d:0d:6a:8e:6b:fe:11:
a9:30:6c:ba:36:6f:30:a2:77:aa:91:dd:11:7e:b4:
25:e0:dd:03:33:6b:2c:16:83:16:bb:08:bf:6e:a0:
ce:24:e6:f0:11:67:b7:6d:0e:db:78:16:9d:8a:3a:
d3:0d:cb:2e:e2:8a:7d:93:d2:43:09:44:a2:93:cd:
21:ba:9b:1d:cd:ab:3e:cb:69:03:71:99:a1:6b:9c:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:B7:15:62:DD:35:4D:F1:34:29:1F:B3:01:70:6A:29:38:C1:7D
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0d:e7:2b:53:26:70:79:09:a1:9a:61:8b:b2:47:4c:b1:11:
35:3a:8c:46:46:09:a1:f6:8a:cb:e9:9d:50:9b:37:6c:96:f1:
56:12:62:1c:1f:fa:c6:dc:5d:41:98:0d:e5:a9:18:96:24:90:
ef:8b:20:8a:a1:2f:97:69:8d:d7:46:a6:bd:40:b5:71:26:65:
7d:34:e5:52:68:43:16:31:4c:73:92:44:be:cf:86:34:a0:1f:
30:d4:c6:94:fe:19:a5:0c:8e:88:92:09:02:c4:8b:71:96:27:
86:e0:2e:88:90:c0:ca:c9:3e:52:62:60:86:6e:7f:eb:d8:42:
ec:a0:b1:fa:ed:95:c9:7f:0b:f2:58:06:73:fa:e6:eb:cc:cb:
92:c1:a8:8f:0d:e2:11:53:c7:83:ac:d6:c8:5b:2d:c9:87:4e:
e2:0b:8d:81:8b:62:67:ff:0d:7e:f7:25:59:33:1d:7c:38:c1:
e9:71:2e:21:ed:c8:ca:73:e8:b0:76:47:3f:b6:a2:56:4e:b6:
0e:dc:c1:34:09:40:70:71:de:d6:c6:7d:44:63:52:c3:ba:95:
94:9b:43:ae:20:b9:45:f8:0a:40:cb:ad:21:cc:e5:3d:05:b0:
00:3a:7f:b2:32:7f:a0:d2:ce:9a:ce:68:77:5e:73:03:55:c7:
f9:b0:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:57 2025 by rpki-client