Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: JTVpC8L6+EGr0KqtYzc2vbWeC9COHANZoF1gA1166Vw=
Subject key identifier: 99:B9:05:DE:57:7D:FA:CB:2E:92:37:8D:44:FC:D4:F9:89:8B:7D:86
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 01984852C77EBC16EA86E7C10183089215C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0924
Signing time: Sat 26 Jul 2025 20:00:41 +0000
Manifest this update: Sat 26 Jul 2025 20:00:41 +0000
Manifest next update: Sun 27 Jul 2025 20:00:41 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: /X6xuHVbSBxTK02bCGazREmptKF/3vVvAwFFYfZPvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:c7:7e:bc:16:ea:86:e7:c1:01:83:08:92:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jul 26 20:00:41 2025 GMT
Not After : Jul 27 20:00:41 2025 GMT
Subject: CN=99b905de577dfacb2e92378d44fcd4f9898b7d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:ca:f3:2c:9a:83:7f:22:ac:9d:a3:7e:8e:
91:d2:8d:8f:f3:92:b4:a4:8d:a4:91:88:4b:c1:0e:
d4:ab:bf:7c:d7:46:b3:58:02:cf:95:5d:e1:31:d7:
4b:7a:fa:d0:e5:ab:29:77:d8:af:23:1e:88:38:0b:
c7:54:f3:32:43:7f:97:78:7a:c6:21:d5:9d:76:fb:
c6:b2:f9:c2:b7:0e:15:bb:92:b4:44:44:6a:72:27:
cb:24:0e:41:76:68:f6:cf:a1:c9:d4:b7:07:17:41:
a7:d2:3a:96:fa:93:59:97:2a:56:12:47:d8:8c:00:
0f:11:9e:53:da:56:6c:7e:43:44:45:f1:51:eb:b5:
88:d8:1a:b7:60:db:e0:3a:1b:8d:3e:08:45:d0:e9:
5a:dc:11:45:c4:71:25:74:2f:0c:e6:76:a2:1e:d5:
7e:e9:37:ef:33:6f:fe:31:54:68:1e:5b:d5:ae:93:
07:65:71:7d:cf:8e:22:54:95:47:e8:29:96:ba:04:
c6:1b:93:4d:ef:64:79:a3:d4:5b:eb:d0:bc:16:76:
81:c3:cd:19:42:d3:a3:bb:42:c3:b4:c1:69:45:36:
4a:96:3b:87:b2:b9:8f:da:5f:3f:92:9c:2f:e6:46:
7a:13:40:3b:b9:f9:08:91:df:bf:52:49:90:21:68:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:05:DE:57:7D:FA:CB:2E:92:37:8D:44:FC:D4:F9:89:8B:7D:86
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a1:31:2b:f3:d5:bb:08:38:a8:01:38:29:a9:0a:5f:89:20:
a5:e6:e1:fc:eb:6d:00:65:cd:01:3e:7e:d7:d4:06:e6:b3:59:
2b:9d:92:f6:85:25:7e:71:fb:fa:87:de:3f:f6:38:40:2e:2c:
98:5b:8b:71:97:0b:07:2b:ff:fe:47:2c:7e:6b:57:33:11:3c:
c1:41:eb:8e:9f:5a:bc:a2:d0:f4:28:1c:1e:c6:78:4a:13:2c:
af:31:5f:9f:4a:64:6c:c5:5e:e4:9a:4d:d9:0b:c4:ef:12:e6:
a3:7f:b6:7c:bd:5a:2b:66:d8:ec:45:6d:31:7e:b4:2d:33:76:
c2:51:52:b8:61:0a:7c:2e:b9:fb:2c:fd:9f:83:07:74:68:3f:
6c:8e:bc:5f:db:d5:e9:2e:99:de:fb:57:6f:f1:40:96:14:2e:
02:8e:cf:ce:f8:a0:f5:4c:95:10:b5:a7:26:0b:e8:91:5c:12:
a6:66:b1:4c:7f:09:75:6c:d3:b1:7d:fd:1c:0b:1a:c0:25:05:
06:a9:8e:ae:b0:4c:da:9c:83:42:c8:cf:c0:11:99:c1:51:a1:
b4:2a:8c:6a:ca:0a:33:72:85:cd:0d:b5:25:e5:b3:54:d2:85:
cf:77:c9:96:33:9f:5e:1b:f9:2d:d8:da:e4:ae:15:95:c7:6f:
7b:f8:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:35:08 2025 by rpki-client