Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 04Kybz0YszdQYfnldXgWr2IxlG9I7ng+xXWqEqcXDZM=
Subject key identifier: 9F:19:05:1C:1C:DA:0C:27:17:15:57:3E:40:A8:D5:5E:D3:46:03:6A
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 0198D4DFDC225B771DDB3BF9AD476CE8F0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: /ulx5RGh6VTGBos3fodSu/9skOjOmhIxAoWBFV7hgvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:22:5b:77:1d:db:3b:f9:ad:47:6c:e8:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=9f19051c1cda0c271715573e40a8d55ed346036a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:7b:e5:67:98:78:f8:47:50:70:c5:a1:12:
6b:5f:02:a5:95:02:3f:53:3f:aa:32:3d:ec:a6:60:
75:91:63:bd:ae:bc:02:70:65:88:ba:0c:21:a1:24:
5b:fa:ba:4f:57:68:d7:91:80:ff:90:c0:cd:f0:e3:
b4:c6:10:23:87:67:28:35:9e:71:8c:bf:f8:16:4d:
da:db:4e:85:2d:c1:a0:20:08:21:8f:63:ad:bf:d8:
6e:77:aa:eb:20:87:e5:ee:4d:27:59:a4:72:b4:80:
39:6a:f1:a8:47:8c:18:8c:aa:0a:48:df:cd:24:b2:
b8:1e:12:07:92:57:9d:51:f9:1a:ce:a9:68:e2:c6:
dd:95:5c:4f:24:23:ea:46:85:b5:10:21:88:dc:29:
4f:d4:dd:f4:22:fc:f9:fc:70:8e:eb:19:f8:0b:22:
27:bb:e2:53:8f:b9:f3:f0:07:21:88:be:fd:8f:60:
e3:aa:b3:00:db:06:c3:49:ff:ba:07:9a:4e:5d:ae:
b9:9e:0b:18:d5:7e:e4:84:4c:2b:1f:84:6f:4b:96:
d8:66:40:a6:09:5f:25:b1:50:4c:6c:64:3a:d6:fe:
46:2d:a5:45:69:09:a4:73:ef:a6:92:80:df:be:f9:
64:42:21:0f:52:ed:87:ae:77:ef:ef:15:17:20:47:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:05:1C:1C:DA:0C:27:17:15:57:3E:40:A8:D5:5E:D3:46:03:6A
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d2:4d:20:e2:12:14:9b:49:7b:d3:87:b2:b0:a4:e3:25:31:
39:03:2a:2f:80:4d:c7:de:93:fa:f6:c9:ee:cb:13:29:2d:19:
a9:82:9d:a8:87:5f:e4:a7:9f:ce:3a:91:6a:26:f0:4d:54:3f:
70:6a:b0:41:9b:3a:db:5e:d7:32:95:df:4b:59:2b:f0:a2:25:
9b:d5:eb:55:51:26:f2:f9:e5:0e:12:0e:31:27:1b:bf:cc:88:
7f:6e:f4:3d:12:aa:92:10:81:4e:45:7d:61:3a:c0:fe:86:01:
d0:31:da:3c:93:24:8c:2b:19:d9:83:2e:f9:4a:0c:29:e5:9d:
dd:08:b8:a7:5e:a9:48:28:f3:a6:40:3d:ea:39:28:78:ad:07:
bf:be:6d:1b:ef:5f:b1:b5:cf:dd:09:f0:f6:d9:a0:38:bc:14:
cf:fc:54:14:ee:6c:45:04:c4:f8:0b:a7:e5:aa:3a:74:1a:84:
0a:41:aa:68:38:6f:e3:1a:0b:45:6d:b8:48:4e:97:2a:aa:3b:
43:67:96:0e:57:59:f3:be:a6:4a:1b:e3:0f:c3:c6:8e:f1:a3:
8d:ff:c2:3b:52:2f:94:93:66:ca:ed:8b:00:d3:15:4e:d8:2a:
fd:10:9f:7d:85:e1:76:03:19:8c:8a:c7:70:2d:8c:58:27:98:
fd:0e:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:25 2025 by rpki-client