Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: ZktHgOLwvev2ICPJvv9i+xFNlI+Nk85/Jbjo4PuzKEk=
Subject key identifier: 96:E5:F9:E5:60:D9:EB:B3:BC:00:6A:B9:15:30:17:30:BC:05:AC:D1
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0198560EB25393A77C6AB202FADC27EB0D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 04B8
Signing time: Tue 29 Jul 2025 12:01:00 +0000
Manifest this update: Tue 29 Jul 2025 12:01:00 +0000
Manifest next update: Wed 30 Jul 2025 12:01:00 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: 43AD2Ea0gtS6TyD/mKqXbvg+e+thlRaXlhIK37V2DrY=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:b2:53:93:a7:7c:6a:b2:02:fa:dc:27:eb:0d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Jul 29 12:01:00 2025 GMT
Not After : Jul 30 12:01:00 2025 GMT
Subject: CN=96e5f9e560d9ebb3bc006ab915301730bc05acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:18:28:75:39:d6:75:b1:47:2c:7e:2f:fc:
4f:d2:f6:46:cd:c0:79:d4:12:4f:12:08:f2:17:be:
d3:a9:29:0e:1b:2d:a0:09:ce:8a:73:51:bb:66:3b:
19:97:c1:e8:f5:7e:34:15:b3:3f:64:02:80:31:76:
1c:3c:32:b9:c2:13:42:5a:c3:9b:0d:d6:2f:87:33:
c7:a1:1b:94:0e:04:fa:3a:6e:2b:5d:de:42:57:4c:
d6:d5:6b:f3:3f:9a:39:58:be:e2:8b:e3:68:aa:02:
5e:8c:c6:d3:05:7e:e0:08:1f:33:8c:67:74:f7:34:
20:44:5f:75:b4:41:98:11:b3:e8:04:9e:2d:71:f1:
1c:64:af:30:ba:95:af:fe:f5:f6:27:95:c3:0d:42:
a7:85:e5:aa:54:f9:5b:43:cc:dc:65:14:df:a8:18:
8c:90:66:68:ce:a1:83:b1:0a:51:21:90:a8:9b:ff:
0f:0b:11:45:2b:61:1a:c3:97:3a:7f:29:7b:2e:bb:
fe:ca:a9:e0:9d:98:a0:16:98:96:0d:86:01:dd:bf:
ad:fd:d6:fb:95:34:ad:42:c0:db:2c:b8:09:0c:d5:
2d:a4:8a:ab:31:f6:eb:ef:ec:70:d8:3c:f3:48:41:
57:73:24:c7:aa:ee:11:a5:99:3e:9c:2a:d9:49:24:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:F9:E5:60:D9:EB:B3:BC:00:6A:B9:15:30:17:30:BC:05:AC:D1
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:71:5e:97:6c:7a:6b:c3:32:f7:83:12:7f:bd:4a:af:fd:
80:fd:c4:fa:17:43:91:68:e7:e2:31:5c:b1:de:f7:ab:41:76:
95:c7:45:6f:ea:83:d7:36:8b:d4:37:30:24:29:c8:7b:f5:35:
84:bd:1a:7c:8d:72:47:ac:2a:8f:e3:f1:e1:30:ae:56:36:c2:
44:d1:21:7d:36:1f:5c:e1:38:57:08:c6:c9:45:3e:3b:28:d2:
87:6c:bf:58:17:af:cb:1f:91:9e:92:9c:eb:1d:ad:12:b8:4f:
b3:b9:1a:0d:e9:73:72:2c:90:87:a5:8c:1a:35:81:8c:fb:f9:
06:2e:87:6a:10:fb:f3:5b:bf:25:83:c9:8d:0b:9a:1a:2e:8d:
71:07:ed:65:b0:52:95:5b:d2:ff:05:8c:19:91:be:13:16:1d:
12:02:c9:19:f0:c8:19:a3:a6:9b:30:49:51:2c:f9:a3:b3:a0:
5e:bf:d6:39:50:22:29:b2:7c:d6:a9:b8:79:cc:7f:9e:a6:c9:
db:d7:64:e0:9e:7f:3a:dd:cd:6e:7f:01:ce:c0:4a:76:49:94:
64:3c:96:55:b9:5d:5a:a1:14:59:01:41:45:ca:eb:74:0b:56:
6a:90:11:1d:53:65:04:16:0d:ae:d7:d3:b5:84:67:8a:8e:24:
6f:00:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:55 2025 by rpki-client