Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: I6mZznjpsVAZF02ZvD0euhed015eG4x/nBBXJcxyBwg=
Subject key identifier: 9D:94:C5:25:43:D8:B4:D3:CC:7F:CB:A0:B3:56:E3:45:9F:C4:A9:8F
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 019849660ECAD99D55950315F6C8AC0E0A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 0F05
Signing time: Sun 27 Jul 2025 01:01:21 +0000
Manifest this update: Sun 27 Jul 2025 01:01:21 +0000
Manifest next update: Mon 28 Jul 2025 01:01:21 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: u6rU6jcgY+xKq7z1xdAtdI4WFqgdxKfSA9PK4utiW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0e:ca:d9:9d:55:95:03:15:f6:c8:ac:0e:0a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Jul 27 01:01:21 2025 GMT
Not After : Jul 28 01:01:21 2025 GMT
Subject: CN=9d94c52543d8b4d3cc7fcba0b356e3459fc4a98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:79:06:45:ba:78:4d:0e:d7:f0:3d:ef:f0:
9e:f9:81:a2:aa:54:84:bf:3c:c2:3a:40:96:9d:14:
1e:cd:6f:81:49:23:2b:cb:0a:9e:be:84:14:a8:86:
3d:4a:3b:ce:4f:97:b2:73:1a:af:1c:f3:0e:03:44:
c9:2b:2b:d2:0c:f0:2c:27:ab:76:8e:7f:64:cb:8b:
b9:c4:53:c4:d6:bf:da:36:fe:87:fe:09:9e:80:ef:
30:6e:2e:89:f2:98:b3:f6:d0:fd:fc:a6:84:4b:e2:
6c:e6:6f:f6:b7:79:24:6f:9b:0a:be:1a:91:08:96:
ca:3f:c6:19:99:da:25:79:fe:db:b9:a6:c9:bb:c8:
77:61:1c:8f:28:43:53:6e:9d:24:6c:9a:a5:d1:1e:
3f:3e:e5:44:67:de:13:04:1c:7d:5a:bb:38:2e:f9:
d9:11:4b:7e:22:cd:6b:9d:84:0f:c3:e8:62:42:bd:
3e:27:76:3e:9a:01:c5:0c:ce:ac:a1:a4:18:8d:f8:
1f:29:03:6b:a4:0f:5f:37:43:7c:3f:2f:60:24:f0:
f5:57:40:0a:6a:5a:3e:fd:bd:6e:be:8b:fb:30:08:
56:73:63:d3:b1:d8:f9:77:7a:9f:52:84:ea:e3:fc:
f4:5a:b4:2f:84:bf:8e:5e:70:87:91:fd:1a:9c:db:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:C5:25:43:D8:B4:D3:CC:7F:CB:A0:B3:56:E3:45:9F:C4:A9:8F
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f0:46:98:06:53:5c:31:e9:13:b3:9c:0f:fe:b1:fa:b1:a7:
65:75:de:1d:2a:8b:10:de:02:75:6c:16:a0:29:14:45:b5:77:
0a:44:97:90:16:53:eb:be:02:47:95:24:e9:a9:62:35:18:ad:
de:98:18:d5:24:33:43:1b:8c:b6:e6:ee:7b:f0:03:7c:3d:47:
f8:cb:65:74:6c:a5:cf:50:01:e4:82:a0:0b:dd:c4:52:af:33:
94:5c:dc:7a:71:9d:e3:43:91:95:ec:1a:e2:09:0c:ce:c2:d1:
ec:33:ef:8a:ac:c6:bb:11:80:ef:7a:a8:f0:29:76:bf:fe:d1:
d9:0d:8d:61:a8:77:f7:c9:bb:87:8b:7f:ba:08:f7:9d:af:06:
e7:5a:cd:84:5a:24:f3:ee:fc:60:26:65:6c:76:3b:c6:18:90:
9f:11:d4:5a:1f:2e:f1:a8:58:10:b4:37:a7:e8:65:c1:36:e8:
51:c8:27:d3:cd:c6:1d:66:8b:45:81:43:7f:15:1b:a7:01:a7:
25:ac:0c:c9:50:71:5e:8d:4b:f7:b3:2e:93:7e:9e:5b:be:ee:
97:2a:36:4d:53:fe:30:72:11:7c:b5:3e:55:2a:52:11:a9:5b:
83:1a:ae:66:f5:e9:5f:33:b4:5d:3c:76:7e:82:ad:db:f9:be:
4f:79:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:15:43 2025 by rpki-client