Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: vTEYKt5sRITqadCZOmS4Hu1Flk8JnYT9PdqyH+BTj/Y=
Subject key identifier: 4C:A5:20:02:1A:B1:02:91:EE:FB:F6:94:4C:35:65:BA:B0:76:B8:1D
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01983FBE50D244CDDF93F2CAFE607661F67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 04:01:33 +0000
Manifest this update: Fri 25 Jul 2025 04:01:33 +0000
Manifest next update: Sat 26 Jul 2025 04:01:33 +0000
Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: aEputxbjSHRyyoKgRxF9PhgY5Iu7ZGSC4Kmfjwr7gyM=)
4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:50:d2:44:cd:df:93:f2:ca:fe:60:76:61:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jul 25 04:01:33 2025 GMT
Not After : Jul 26 04:01:33 2025 GMT
Subject: CN=4ca520021ab10291eefbf6944c3565bab076b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:19:f9:26:55:71:c0:77:c0:f2:0b:70:bb:
12:9a:76:92:35:a0:32:52:e8:62:42:b6:15:d9:85:
f2:80:52:47:7c:3b:79:04:51:1e:ba:77:49:33:31:
24:43:00:38:08:7a:fd:d4:cb:cf:d4:26:58:9d:82:
39:ab:a5:04:30:f8:78:f1:09:71:54:06:4a:8a:56:
c8:b0:a5:4b:54:54:74:29:53:56:7b:bc:6c:81:4f:
55:d3:c2:93:eb:1f:ba:97:0a:f7:6a:94:33:85:87:
2d:33:b1:1d:8f:5b:a3:31:bc:6b:87:3d:1f:0e:62:
ab:43:35:0a:53:b3:51:12:bb:64:b4:9c:b9:7d:5c:
a0:62:8e:26:21:c5:8f:d6:22:83:3c:8a:53:33:42:
e0:53:1f:31:97:32:24:0e:a0:12:bf:5f:05:98:fa:
a7:58:2a:65:57:3c:0a:97:dd:05:27:7e:35:32:a3:
5b:1c:fc:5b:4d:76:0c:e3:28:43:aa:67:d0:cc:3a:
62:61:c5:93:39:25:39:20:1b:61:cb:f1:fd:83:cb:
c1:05:7e:d8:ef:6b:76:6f:fe:c3:db:48:e6:54:2e:
20:cf:97:49:a3:7a:87:c8:8b:cd:1f:e4:ab:99:c9:
25:4f:6e:82:37:45:99:0b:6c:a4:4b:ea:9d:18:98:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:20:02:1A:B1:02:91:EE:FB:F6:94:4C:35:65:BA:B0:76:B8:1D
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d1:6f:ec:5f:25:4a:58:07:fd:2a:47:1a:bc:60:3e:2f:0b:
44:3f:18:b6:4d:17:ef:b8:93:88:de:8e:7d:28:1c:e6:f7:5c:
10:f9:ae:49:0c:a3:d0:e5:b6:3a:e1:13:4e:1b:1d:14:8e:9b:
00:82:6f:d1:04:17:4e:46:d0:aa:bd:7b:df:cf:77:1e:fb:14:
a3:b2:48:3c:b2:d5:46:dc:52:d0:82:f1:e6:61:e8:6e:e5:2e:
8d:b1:e6:81:32:0b:f2:3f:0b:d9:05:d2:83:b5:5e:2c:e0:fd:
e7:26:28:8b:6e:76:6e:c0:d4:5a:14:64:59:3b:35:3b:77:4f:
3b:46:90:95:5e:5f:a5:81:67:04:93:0f:20:de:a2:08:d6:29:
79:e6:e5:c5:66:47:d3:a3:64:67:cc:9e:31:74:fd:cb:7d:df:
bb:80:4f:ee:5e:7d:9a:66:52:a5:cf:3e:38:79:74:d9:c6:b9:
f1:c4:de:ce:1d:0b:c6:18:ac:64:fa:e6:2a:eb:04:00:67:33:
b3:d0:1c:0c:d9:7a:49:8a:0f:d3:4b:c1:14:1e:22:f8:05:e4:
75:12:d4:a3:c9:20:30:5c:bc:7b:ba:8c:51:82:ed:2a:34:34:
d9:f0:81:85:0f:54:a1:4f:30:b8:6f:b2:45:a6:3c:97:c3:d9:
c5:d8:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:48 2025 by rpki-client