Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: cAmI7Upm3S9k20LoIGYV7bgX+Z7x7YAhSG/v4r8iA8k=
Subject key identifier: 06:30:5A:6B:10:00:94:BE:DD:5B:CB:5F:AD:9C:BA:20:F3:EE:16:D9
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01984B540A71C25DFD550A89E30CDC63FAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 0215
Signing time: Sun 27 Jul 2025 10:00:55 +0000
Manifest this update: Sun 27 Jul 2025 10:00:55 +0000
Manifest next update: Mon 28 Jul 2025 10:00:55 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: eSz7tmlZ4xe1JKTUaKOLRV24tqGweNneXj99qKODA7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:0a:71:c2:5d:fd:55:0a:89:e3:0c:dc:63:fa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Jul 27 10:00:55 2025 GMT
Not After : Jul 28 10:00:55 2025 GMT
Subject: CN=06305a6b100094bedd5bcb5fad9cba20f3ee16d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:aa:ff:62:86:47:81:77:43:ea:9b:74:43:
b0:21:d0:bb:36:34:71:73:3f:b1:06:3e:13:0e:46:
5e:75:1c:ee:85:68:ed:ef:8d:29:86:02:87:cf:1a:
93:8a:d7:3b:3b:1c:c1:78:6c:10:8f:19:00:3e:08:
06:a6:8a:41:b0:8f:e6:aa:6b:05:5e:f7:e8:e1:8c:
c1:0e:3b:b9:17:a4:6e:ce:c9:e8:d0:cb:d5:0c:79:
2c:7c:8c:f6:a4:d7:7c:3e:ef:3d:e0:34:9c:b5:32:
cd:56:b9:64:ca:1d:78:b4:c2:56:07:56:a3:6c:ee:
51:a9:91:1b:e2:9b:b2:e9:dd:3f:0b:2a:a4:f7:00:
fb:9a:f9:78:bc:31:14:07:57:5a:b1:91:e2:20:d1:
bf:1f:d6:e5:6f:b8:89:43:c1:e6:80:a3:20:6f:ef:
21:08:59:c5:75:b9:5f:f0:76:57:35:ee:3e:2e:81:
b2:e1:b3:75:95:33:72:3c:2d:a8:79:f3:97:78:6c:
80:19:95:b5:84:0f:54:6d:13:48:06:4a:b1:18:5e:
e0:3f:b5:e9:2e:41:ed:e8:92:79:b0:38:54:22:ab:
ba:5b:75:bb:96:b0:4c:2b:71:04:7e:5a:62:8b:4d:
72:8e:b6:29:64:75:0f:2e:62:65:39:1a:54:94:1a:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:30:5A:6B:10:00:94:BE:DD:5B:CB:5F:AD:9C:BA:20:F3:EE:16:D9
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:9b:8a:c5:85:2f:27:50:b4:e7:c5:12:a6:57:37:5d:bf:
94:ca:22:4f:4f:c1:0b:e7:e5:87:a3:5d:8d:a8:79:83:c8:d4:
30:4f:f1:15:ed:56:57:39:ac:91:5b:4d:20:54:55:da:45:ac:
ee:8d:38:ab:ed:41:a8:17:3c:0a:e2:a1:1c:a4:f7:2d:f3:09:
f6:49:e8:58:ed:41:80:6a:5d:c2:cf:a7:9c:b4:04:88:8a:49:
7f:2a:74:3f:be:a8:65:e7:84:17:03:dd:ff:02:15:25:9c:ed:
54:05:28:e7:4d:df:f4:b6:5d:9c:ff:04:bf:3e:bd:a0:b7:63:
94:95:b5:d5:a5:d3:21:62:43:ae:2e:7b:cb:2f:d6:de:8e:48:
bf:a4:41:88:21:f5:3e:84:75:c3:32:fe:fe:c8:9e:fa:22:09:
d1:af:42:fb:16:c0:97:5d:47:b4:6f:b4:27:d4:b4:63:40:ce:
ed:0e:15:c5:47:5b:e0:75:a2:29:60:78:b3:76:f9:62:7d:31:
a6:e5:a7:0d:50:f8:b3:39:30:e3:de:ad:da:ad:e3:fa:49:fa:
0d:32:ef:90:52:07:16:54:38:96:bd:e7:cb:d9:0d:c2:2c:ee:
2b:7d:93:67:d7:2e:6f:2a:57:b2:10:12:71:84:8c:8d:09:e1:
cd:50:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:41:58 2025 by rpki-client