Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: 5bJW0s0TEP/hVx/vTLpv/MKy4q5tRiuIOKbFFRVqANM=
Subject key identifier: 22:5C:DA:02:6C:A8:0A:E7:B5:CB:67:71:37:F6:CD:BE:BC:C5:C8:2F
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 0198D5838649B5E240A44A14278D61C55F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: /NQk6ci9rkKI0EpEAcu3i4mHPPNjgq7Ibm+WXywXHvk=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:49:b5:e2:40:a4:4a:14:27:8d:61:c5:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=225cda026ca80ae7b5cb677137f6cdbebcc5c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:06:62:3e:23:a4:df:46:db:28:e8:a7:7a:
a5:6e:90:ae:6f:ba:5d:fa:85:08:ca:81:81:bb:5b:
69:f2:de:62:8f:34:95:8d:4c:1c:49:ae:c5:24:42:
b1:e6:d1:1f:e8:33:c0:c3:1c:aa:8e:45:d0:a8:0f:
59:d6:f5:ae:fc:64:6f:6c:97:eb:1b:1e:9f:69:ff:
9a:55:5f:6a:c2:6b:5f:5b:8f:83:23:9e:d5:ca:46:
28:cd:d9:05:19:a7:c4:ff:6e:5d:d7:4b:55:d8:4a:
c7:35:2a:b5:66:1c:34:56:d5:97:aa:3b:84:2e:9e:
a3:7f:cb:ee:6c:8d:52:29:ff:26:fa:86:af:7a:d9:
fd:a5:3b:ac:ee:6c:a3:49:c5:22:3a:1c:f4:99:6d:
8f:fe:b4:0b:16:46:dd:ca:7a:15:50:db:f7:df:a3:
9d:64:a6:c1:b0:28:1f:41:b4:a6:1a:6d:a9:54:4a:
a9:f0:60:fb:89:91:7c:f2:d8:eb:e9:f7:b7:b0:99:
71:50:ba:0f:e4:d0:18:98:a3:f5:c8:9d:2e:ca:15:
ea:a8:85:52:f5:6d:e4:4c:35:09:d5:58:b4:b0:88:
bc:1a:a7:62:21:51:43:4c:c5:11:21:85:56:05:f7:
08:67:68:d9:4e:ba:f5:d9:34:bc:1d:19:79:23:13:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:DA:02:6C:A8:0A:E7:B5:CB:67:71:37:F6:CD:BE:BC:C5:C8:2F
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:f1:72:02:0b:a6:a0:34:70:3c:bb:94:ec:5d:8a:21:ab:
59:b0:65:80:33:50:39:c4:52:29:0d:cf:87:c1:d7:8a:dc:31:
df:8c:ba:46:5b:22:47:72:8d:d4:ea:cf:d8:0f:8c:57:f0:b9:
69:8e:c5:38:c4:8f:bf:0e:d2:b3:fe:c4:1d:94:38:79:f4:2d:
34:82:c6:a2:20:cf:3e:66:2b:a7:a7:f7:a5:9e:35:13:ac:d2:
39:e6:c5:96:b1:08:4f:8c:1e:86:29:fa:a0:fb:8c:c2:50:4d:
ea:45:ba:71:79:f6:af:b5:f0:8a:30:28:8a:73:39:bb:ae:1b:
98:69:ae:18:bb:cc:81:03:4e:f4:53:7f:28:2c:18:3f:f9:c1:
7e:85:31:4f:49:a9:6f:a5:8d:55:a6:ad:de:db:ee:26:d3:3d:
85:bb:94:57:07:f3:41:33:f5:3f:0f:02:50:e5:4c:79:b5:0d:
b9:62:43:47:c2:19:9d:55:ab:f4:22:41:1b:93:fd:39:99:cb:
10:43:dc:0a:e5:f6:b7:c0:33:53:99:15:e6:5d:50:58:3a:da:
dc:4f:63:25:bd:53:1d:d8:72:97:7c:fa:08:fa:64:6c:92:50:
29:a4:c3:71:bc:ba:ac:ed:08:c6:e1:0d:76:ac:36:82:51:76:
00:6d:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:28 2025 by rpki-client