Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: gc4ssh2Rt9HlK3Xk95cfT0av1eQlOr1Bj3ys2c3ZJlE=
Subject key identifier: 41:8B:7F:7A:CD:9D:B6:BF:5B:57:25:A6:D4:85:57:24:0B:19:70:E9
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0198518CB1BEDA6E68ACA736A581FF3D66EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0A19
Signing time: Mon 28 Jul 2025 15:00:31 +0000
Manifest this update: Mon 28 Jul 2025 15:00:31 +0000
Manifest next update: Tue 29 Jul 2025 15:00:31 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: KnbUd5nAcObJx-mFANUZ-3dv9ZE.roa (hash: J1B+8yhPspHeU/Bm8kDFuArgnyqhlnkM76APcA7nLcw=)
3: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: eVPp6Q77HQY64UmnC/0Uogg3zru3UcIcczYklB1pC94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:b1:be:da:6e:68:ac:a7:36:a5:81:ff:3d:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jul 28 15:00:31 2025 GMT
Not After : Jul 29 15:00:31 2025 GMT
Subject: CN=418b7f7acd9db6bf5b5725a6d48557240b1970e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:5e:c9:1c:3c:3d:7c:3d:bb:ce:6e:22:30:
f9:89:cc:e8:f1:7c:80:91:4f:19:0d:23:09:14:cf:
30:ed:50:d4:32:b0:2f:27:cf:bc:3f:80:ef:2a:9b:
87:b8:cb:62:fa:95:e5:40:83:c7:70:d6:c1:22:4f:
14:a7:a5:23:d2:88:ac:1b:3f:d6:33:0b:b2:45:f4:
39:10:56:b9:af:8d:2c:d1:28:3e:5d:ea:f1:fe:d7:
c1:b5:a2:ee:b2:13:1a:63:d3:8f:96:07:90:51:9a:
56:75:75:5c:78:6e:f7:89:02:b6:c7:22:51:18:ec:
42:73:0b:91:78:61:ac:f7:af:d8:f8:12:ed:4d:d6:
9d:51:db:74:c1:b4:41:52:17:4f:10:d1:f8:a4:f1:
01:68:47:e8:48:e9:f0:fa:f5:c3:78:ee:16:f4:a3:
7c:45:54:3f:a7:03:1d:7a:2e:05:a0:c1:d1:5a:18:
f7:01:63:0f:cc:80:6c:18:f9:6f:56:a7:d7:65:c0:
95:27:b9:5f:34:4e:1c:e5:66:20:4e:27:af:c3:c3:
9e:cd:57:ab:f0:cf:08:57:c6:1e:4e:b0:e4:89:95:
06:96:76:9a:39:9d:96:15:10:26:ac:38:b3:c5:26:
63:9f:07:05:ed:f9:a6:8e:f7:54:55:9b:40:1f:ef:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:7F:7A:CD:9D:B6:BF:5B:57:25:A6:D4:85:57:24:0B:19:70:E9
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:50:52:5f:a3:67:25:63:63:ec:a4:38:f6:2c:f9:39:51:
f8:05:ff:20:85:51:0b:09:a5:01:b0:aa:b1:eb:81:55:b1:8a:
9c:5f:66:15:76:d9:92:7d:c9:e7:81:e2:9e:d9:cc:8d:2b:a9:
48:69:5d:d5:b9:5d:07:c6:ad:67:9a:31:41:93:46:a7:58:8a:
35:41:c2:db:ee:56:b4:12:82:31:1c:0d:70:65:f6:5c:b7:43:
1f:f0:48:7e:09:5d:46:68:8c:c7:ae:1f:91:3d:52:2d:fd:20:
72:28:93:fa:9b:43:7e:a5:2e:c0:4d:ad:77:de:78:8c:dd:e5:
48:37:f6:43:e5:5a:f0:3c:60:ba:db:69:fb:cc:81:bb:ac:f2:
9e:53:86:b6:43:7b:b0:e1:1d:d4:c3:6c:6f:00:05:8f:46:fe:
1e:e2:4d:fc:0e:60:f7:a9:68:a6:47:9d:3f:59:c2:87:64:b8:
d6:2a:d8:72:1c:3c:21:18:57:9e:a0:02:bd:26:c0:d3:b0:0f:
6c:51:27:88:fd:2d:e5:9b:45:26:ce:30:26:ad:08:21:5b:1d:
14:e8:11:eb:c0:5a:0b:a7:c4:a8:c2:c0:d0:34:19:5b:60:ba:
17:ef:ec:aa:0d:d2:79:20:b4:68:31:4e:54:3f:b1:87:a4:2f:
44:63:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:30:50 2025 by rpki-client