Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: V5/ECf6XzhhaSOi+SwbSLW9otkOyzUlmtbeap1ngAgk=
Subject key identifier: 64:CC:3D:F9:35:BB:23:C3:2F:09:D0:2C:AD:73:6B:20:29:BF:F6:7C
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 0198451A8F75BC8F46E2EF5D47B3C4DA8DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 0104
Signing time: Sat 26 Jul 2025 05:00:25 +0000
Manifest this update: Sat 26 Jul 2025 05:00:25 +0000
Manifest next update: Sun 27 Jul 2025 05:00:25 +0000
Files and hashes: 1: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (hash: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: M1nsyIR+jWCvapWQNNage/K81dTfcLmqWivTyBDSUGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:8f:75:bc:8f:46:e2:ef:5d:47:b3:c4:da:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jul 26 05:00:25 2025 GMT
Not After : Jul 27 05:00:25 2025 GMT
Subject: CN=64cc3df935bb23c32f09d02cad736b2029bff67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:20:07:81:28:aa:a9:ea:71:d9:69:86:53:
3b:7d:52:ac:f2:41:58:2a:b7:99:21:d4:93:08:e3:
85:fc:1e:13:1d:b6:0d:de:2f:9d:43:78:6e:3b:3c:
70:d0:27:da:fa:9c:8b:34:a8:32:8f:a7:1e:ea:56:
5c:80:e3:33:b0:03:3e:c2:91:5b:aa:40:c2:ab:11:
54:90:6b:18:17:8c:8d:fe:72:8c:43:e5:4e:30:48:
d2:ae:ae:08:5b:70:b3:86:58:18:02:6e:8c:83:13:
e9:de:aa:44:b0:f6:2f:ac:e0:05:2c:f8:44:06:71:
c7:14:0a:9c:79:f7:2f:f3:4c:82:28:df:1e:25:8c:
2c:d0:ce:61:c5:90:37:37:6f:d9:47:1a:6a:78:7c:
a0:6a:69:65:26:d0:e2:c2:b8:a1:6d:30:28:ca:f5:
a9:91:44:b5:b0:32:00:0d:27:52:dc:48:c0:05:0f:
bb:3f:a3:00:f2:a7:c6:b4:4d:23:7b:8c:91:34:45:
6d:ed:be:60:44:34:ef:f2:5b:c0:26:7e:d4:d1:c5:
c2:97:78:cf:ed:89:ce:a6:13:89:ff:1c:6b:a3:46:
6b:b2:a9:a6:dd:27:e6:3b:27:2c:0c:f2:7c:e4:63:
9b:41:c7:26:1b:b9:b6:53:9e:88:a9:3d:bd:ce:58:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:3D:F9:35:BB:23:C3:2F:09:D0:2C:AD:73:6B:20:29:BF:F6:7C
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:e5:45:3e:63:28:e9:93:45:05:f4:68:64:e6:16:56:b8:52:
63:53:a1:7a:f1:6d:12:d7:ce:70:55:a9:8e:18:fa:d8:64:21:
d8:8e:34:b1:9e:5d:6d:b6:fc:78:c8:ba:f8:f6:00:89:46:fc:
ce:fe:24:f1:4a:67:89:89:c2:51:af:29:06:06:d2:65:d2:c1:
cd:42:49:12:cd:9c:0c:61:3c:0d:11:09:a3:9c:08:cd:68:7a:
31:24:0d:ca:3a:45:5a:b0:ca:bb:4b:b3:7d:dd:4a:c4:cd:fc:
17:23:0a:88:db:e0:85:f0:2a:8a:e9:c4:8c:92:1e:2f:bb:33:
e3:a1:2e:80:6a:42:01:cd:d7:2e:62:b1:5f:99:41:85:52:a6:
98:09:6e:b1:82:a6:9b:2b:3b:50:11:b1:a5:16:4a:20:5d:8c:
bf:e4:fd:ee:b7:8c:e4:6a:06:b6:9b:58:37:37:7c:10:31:b7:
97:43:ad:15:84:ab:71:c8:23:5c:99:3d:6a:27:5c:bf:0e:16:
13:ab:c4:88:4e:2d:cb:e3:3e:49:9d:85:70:16:ed:d8:89:24:
8b:03:6d:c4:bb:ed:9e:53:2d:ac:1d:be:e0:f7:41:8f:57:9b:
6d:81:d7:ed:f8:bb:ca:40:44:f2:d0:5c:b6:8d:12:b5:2d:58:
d9:82:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:47:07 2025 by rpki-client