Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: rUpQnZTxYejEbz2ZsqQ+YTU+rq9+GETfiYKB7lHC9Gg=
Subject key identifier: 20:D9:D5:D7:F4:42:54:AE:9E:02:F6:61:FF:69:31:46:A9:B0:6F:4E
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019849D350DD06075B18CE1D1E5B26F7A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 133B
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: tLsRrsUx0M/NC+fw1QvFFl+bd64w5gC4pmKcmsuO+04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:50:dd:06:07:5b:18:ce:1d:1e:5b:26:f7:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=20d9d5d7f44254ae9e02f661ff693146a9b06f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:b8:7f:fa:8f:2e:45:66:c0:e9:b9:76:2c:
25:91:f7:af:64:01:b8:30:20:ea:74:ed:d8:58:74:
ac:c2:9a:23:2f:b2:77:49:86:44:69:0d:69:35:9c:
25:f1:31:b8:2c:a4:21:c0:81:ae:78:40:35:02:23:
e2:f6:2b:0a:f8:c5:87:f9:32:6e:de:d0:f3:cc:59:
9d:7b:28:4d:7f:cb:01:57:9a:17:de:5c:e1:b5:17:
5d:ba:8d:83:ab:0e:42:e2:fb:5e:2d:fd:b4:04:a6:
03:f3:46:6e:cf:3c:e5:88:2f:63:18:d1:2a:9d:0d:
9b:b8:7b:77:b5:19:d1:25:c1:2f:3e:58:8b:b2:e4:
d9:76:89:aa:b7:28:e9:10:51:ec:dc:36:86:2d:ed:
c7:b2:cb:bd:47:2a:42:c9:2d:ae:15:32:e2:30:96:
09:7b:33:e9:fb:28:8e:5d:9e:b4:2e:99:47:ef:a8:
3c:f8:c3:e3:ff:0d:57:d9:72:63:31:53:26:6c:e7:
b4:ac:82:18:c6:14:aa:df:5f:fd:1f:c1:e5:af:e7:
b6:34:d8:22:fc:71:2d:98:e6:5f:b7:b3:c9:7c:37:
af:7a:9b:70:01:93:cd:ec:f0:0b:97:c2:a8:55:ff:
2f:e2:1e:8b:76:71:e6:53:1e:58:9f:07:8f:7e:d5:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:D5:D7:F4:42:54:AE:9E:02:F6:61:FF:69:31:46:A9:B0:6F:4E
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:56:1b:c5:94:5d:67:75:ce:5f:a3:16:14:25:44:7e:aa:0c:
18:fa:a2:a5:e9:2a:f0:f9:69:1d:fa:52:8f:73:a5:9b:be:43:
30:52:3f:9b:b4:6e:96:62:0a:e5:44:52:f9:5a:8d:4c:49:05:
49:01:17:11:3e:f8:6c:d5:ee:6b:72:29:7b:5e:5a:77:74:67:
10:9f:bd:d0:55:cf:cd:a2:bf:ce:55:5e:d6:bf:08:95:90:ea:
9a:45:cd:55:56:5b:9d:51:07:f2:61:2d:c9:67:d6:5e:ff:45:
a7:83:b4:44:15:f0:a5:bf:82:c1:3c:f6:a0:38:e1:05:92:10:
94:0b:47:aa:a6:18:aa:58:09:8f:fb:a5:d8:7c:4c:ae:bb:1c:
1d:ae:9e:5c:96:ba:1b:db:8f:88:c8:ad:de:c9:02:75:2e:5c:
69:f4:14:96:4a:fc:74:24:53:c6:00:6e:60:28:f4:6e:5e:ad:
9c:3c:b2:39:b6:48:3c:90:1f:30:93:9c:1f:06:d4:4e:07:54:
02:f7:9b:f2:f9:92:5d:ce:11:13:1c:8f:3b:7d:7e:af:af:42:
54:92:ab:b4:15:c7:78:9e:bd:47:17:94:ff:ed:ed:2a:06:d4:
48:b9:5a:c8:a4:9a:09:96:4a:37:19:61:e2:5f:16:84:92:5d:
10:f3:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:57 2025 by rpki-client