Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: MMKNpDBxKUvkdph0qfTBrObitedMzO2L7o/xvTRT9qI=
Subject key identifier: A5:A3:1D:C7:42:68:58:24:67:8A:D9:B0:8D:AF:D0:C7:A6:63:4A:AA
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0198D54E68DF0C7E60A752C8AD86F4CAC0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 065D
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: jNjmoM4POU6538XGPm1nMJ3hqwZ9eqqyjJCD2mH0w74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:68:df:0c:7e:60:a7:52:c8:ad:86:f4:ca:c0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=a5a31dc742685824678ad9b08dafd0c7a6634aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:f6:d6:02:c1:ee:1f:b5:a5:21:bc:53:ea:
f0:b8:17:ed:7b:bb:f2:d3:11:19:dd:b9:b8:e4:23:
cf:8c:ce:d8:ff:6e:cc:58:7c:87:38:35:e9:6f:df:
ab:26:8c:6a:0c:42:d2:57:13:40:e8:8b:2f:56:76:
65:be:1a:4a:e7:ac:07:62:49:86:a6:8c:c4:6d:8a:
80:ff:1c:fc:90:a8:d8:1a:3b:db:e6:de:02:4e:bf:
55:a0:00:a4:bf:0d:24:27:10:90:d4:cf:90:31:ec:
2b:22:d4:52:cb:fb:ca:c7:d3:86:6e:90:c1:e5:a8:
80:1f:e1:a4:d4:d9:32:51:41:a9:1a:41:86:2c:8a:
ff:cb:d3:55:4b:7d:6a:87:e2:06:fe:70:c8:a4:4b:
5e:1f:51:49:9b:7e:4e:c2:45:8b:5b:e4:a2:21:d2:
fe:f2:62:75:be:be:53:0a:6a:fc:60:f7:7a:b2:ac:
b0:22:40:ff:4a:08:76:f0:83:39:ef:e3:26:94:87:
8b:35:87:f5:d6:e0:57:18:9f:88:67:0f:bb:47:bf:
08:59:c6:49:24:3a:2d:0e:39:10:36:a8:e5:25:ff:
8e:c6:4f:75:33:cc:8e:8f:3d:72:9d:cb:7d:21:e2:
fa:00:1c:08:90:b1:fc:ad:38:26:31:41:80:79:56:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:1D:C7:42:68:58:24:67:8A:D9:B0:8D:AF:D0:C7:A6:63:4A:AA
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:26:f6:0f:f4:de:c5:c9:5e:be:3e:b8:8b:f5:8e:fc:6b:
72:9f:04:65:cd:24:22:ee:ec:71:37:f2:73:c1:6f:c8:ec:9a:
a9:b3:ae:01:a8:1b:fb:07:95:0c:d1:d8:8f:32:21:64:c8:3f:
0a:22:34:93:0c:b5:82:43:13:73:0c:ad:47:b4:7f:5a:2b:f1:
bd:72:81:ec:96:18:01:36:4d:23:f7:fe:f4:6a:6b:2a:b6:74:
f2:c7:a9:58:64:b5:b3:0a:35:f2:5f:db:fc:45:f5:96:9e:4d:
94:be:ba:0e:a0:a9:51:f7:27:0f:3f:f9:a2:b2:93:69:13:75:
dd:84:bc:21:96:10:83:71:e8:bb:90:3e:65:50:2d:c0:af:2a:
ed:17:8a:c3:fa:63:33:c2:ea:d2:18:b5:df:5d:a6:3c:13:a6:
f3:ee:31:b0:6a:9d:6f:61:d4:0b:f3:6a:a1:7b:a7:e4:d9:3e:
bb:de:3a:bf:50:c5:24:6d:d5:f1:d3:62:0d:fb:32:95:57:23:
70:0d:04:2d:3a:5d:5a:4c:17:6b:5a:ae:22:6e:c7:82:3a:f8:
3d:63:09:b5:bd:0d:61:1f:23:36:24:18:ff:de:91:31:77:f0:
2d:1d:d3:b3:0f:96:06:16:5c:40:2a:2b:66:1f:e6:ee:5b:1c:
f7:02:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:32 2025 by rpki-client