Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: 7OTclj7z60zO1LbPTCyI0qqRMzQ2ms+RFHjHoRcqKpo=
Subject key identifier: FD:D7:D8:4E:9F:8F:2B:30:5C:D1:1A:DB:5F:73:26:52:A7:EC:8D:1B
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 0198D54EA080C9B38B9C265B7EAB321C7E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 05CC
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: lEtJCnky5BvU8ZEvzIFhdx+rUTNv33yza7j+hkaPK7w=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a0:80:c9:b3:8b:9c:26:5b:7e:ab:32:1c:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=fdd7d84e9f8f2b305cd11adb5f732652a7ec8d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:e3:de:4b:26:b3:aa:2f:dd:86:02:73:ac:
63:20:23:25:c8:08:cd:e5:0b:55:2a:c7:14:78:c9:
9e:6e:f9:89:c2:7d:8b:c2:11:c5:a1:00:65:aa:fa:
1f:ef:b0:69:8f:74:c5:d8:98:6a:a9:c3:6a:61:ca:
d6:13:42:0d:b1:e5:62:89:7d:bf:36:f9:17:1d:ff:
c9:11:88:e1:15:62:08:99:e0:56:16:de:0f:58:dc:
49:25:b9:c5:f2:bd:87:a9:83:36:ab:ef:cc:da:87:
6c:28:a9:c3:5d:22:23:14:89:5b:d6:7e:15:9b:c2:
65:89:5a:bd:f3:66:97:ca:30:75:cf:15:0d:cf:3f:
01:8f:76:d2:8f:cb:ea:dc:68:f0:bd:a1:1c:9f:48:
c8:62:0a:52:99:93:96:ec:a2:96:b9:f6:39:20:e6:
4d:62:0a:62:5c:d2:3b:80:93:74:55:09:7d:db:22:
11:0d:93:b5:50:e9:01:d9:31:95:64:5c:a9:ea:10:
01:b3:18:61:d6:0e:43:03:b9:cd:2c:09:d0:55:ff:
3a:4c:8d:04:04:15:45:ac:e9:32:f5:b6:58:ba:74:
e5:b2:72:1b:be:27:61:02:4a:85:e2:00:c1:44:ed:
ee:16:37:c3:ff:28:d1:99:08:f0:ee:92:20:e9:bf:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:D8:4E:9F:8F:2B:30:5C:D1:1A:DB:5F:73:26:52:A7:EC:8D:1B
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:a2:1f:6c:83:f6:af:29:3a:c3:73:8f:97:0f:75:bc:bf:
e4:b8:b2:10:44:c1:18:79:ef:cc:64:15:0f:a5:e7:d2:fb:e9:
cb:33:80:fd:a1:1e:a6:92:41:10:7c:c1:5a:a0:4f:ad:d6:4e:
39:b6:6b:85:b1:aa:30:04:96:87:b4:7e:6a:6e:ee:be:e7:c9:
fd:f7:af:7d:b2:a2:9d:05:e7:9a:0d:e3:99:65:e6:9d:12:9f:
c2:54:d0:27:7b:54:d4:fc:83:75:4b:88:4e:6c:f7:45:d3:11:
54:aa:0b:9c:7b:5f:a0:48:ef:12:cd:11:d4:74:39:53:83:f0:
79:da:62:b4:75:33:fc:ef:5f:b0:af:1c:8f:37:00:5c:08:54:
50:d7:98:96:6a:65:c2:9c:e8:02:11:0f:7e:b0:77:d4:03:24:
14:92:c7:45:28:27:ee:d2:93:d7:91:f8:06:1e:e3:d4:ee:3a:
55:cf:54:1c:1e:1e:a5:f4:9c:fc:0b:12:ae:ab:f9:75:29:f4:
3e:fd:f5:63:8a:88:b7:6e:f6:6a:1e:ff:53:d5:54:0c:39:a6:
7c:78:4c:c3:8a:0e:f1:45:04:50:c8:cd:6f:63:16:f1:76:3d:
44:5c:e4:10:d9:3f:40:b3:37:da:9c:7b:5d:29:a3:a3:89:28:
c4:ad:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:57 2025 by rpki-client