Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: Dorcgqk8Wroxbf8EYiI0okA8/hISx9vCYFFoBQffxrM=
Subject key identifier: E2:C9:26:59:9E:CD:AD:36:79:F8:E6:E0:5B:41:8D:11:D0:8F:90:1B
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019844763CFFFAAC3DA4E76FD8FC629FD92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1612
Signing time: Sat 26 Jul 2025 02:00:56 +0000
Manifest this update: Sat 26 Jul 2025 02:00:56 +0000
Manifest next update: Sun 27 Jul 2025 02:00:56 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: /fzVjFBgYDWWzFaMIbScydy8aqYUTEtTSLQe8k5/hA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:3c:ff:fa:ac:3d:a4:e7:6f:d8:fc:62:9f:d9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jul 26 02:00:56 2025 GMT
Not After : Jul 27 02:00:56 2025 GMT
Subject: CN=e2c926599ecdad3679f8e6e05b418d11d08f901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:cf:64:73:f7:b5:86:a7:f8:ee:05:bc:ba:
39:dd:dd:fe:fe:17:5c:eb:de:7a:35:21:e4:bc:69:
65:27:d0:cd:f4:c6:52:1e:40:c2:9c:96:ba:64:c5:
d2:a3:b0:80:6c:85:13:c0:d1:9e:1a:b0:a2:b4:1b:
6a:3c:fb:dc:02:67:17:4c:d2:ee:eb:17:c1:f3:90:
fa:86:18:6e:77:73:d5:84:ff:96:ab:02:f1:de:65:
03:96:52:14:d7:b0:f0:4c:9f:17:39:19:7c:10:3c:
5e:69:0a:0f:b9:63:89:15:2a:55:db:a1:9f:c7:c1:
d6:75:a3:dc:5c:7c:89:ee:b3:72:a1:b3:53:f2:c3:
79:a3:09:b8:6f:38:ea:c6:75:40:97:a9:39:2c:95:
0d:c1:4f:fa:64:4e:8b:d1:a3:c2:4a:a4:29:a3:6e:
47:fc:00:3f:a9:fe:06:69:62:06:1a:9b:7e:57:0f:
22:a1:d4:21:a9:0d:c8:a0:5c:35:c5:d1:b7:65:f2:
6b:a6:35:94:a4:48:5e:c9:87:cb:4c:3c:db:8e:b2:
44:48:27:22:77:3b:65:f3:58:36:f5:59:f4:7e:7a:
e1:06:33:d0:fc:48:f5:e8:7a:63:eb:2f:8f:7a:d8:
32:ec:c3:cd:8e:20:bb:1d:a3:57:aa:0e:da:1f:df:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:26:59:9E:CD:AD:36:79:F8:E6:E0:5B:41:8D:11:D0:8F:90:1B
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:1e:25:9b:72:a5:3c:d7:96:b7:8a:53:ed:13:24:3b:e7:
64:a6:28:99:0b:32:3d:b7:89:0a:9a:d7:45:9e:b3:11:32:c1:
94:df:b9:9d:5c:a7:ef:d7:29:8b:c9:b1:bb:e6:7f:dd:71:fc:
9a:19:f8:13:8a:85:99:08:24:ec:a1:1b:e9:08:fd:7a:61:c0:
85:fa:4b:ab:bc:07:32:87:48:c2:46:cc:31:37:41:e2:73:f9:
ad:a2:82:53:4a:d8:ec:db:09:b3:9c:27:32:24:93:8f:dd:20:
a8:71:db:f0:c6:89:e1:bc:f1:db:29:53:36:ee:8f:55:1d:04:
31:d5:7b:6e:a5:1c:4c:4c:28:a9:8e:8c:bd:1e:31:a0:fc:c5:
99:a0:e2:ae:12:1f:d8:70:85:0b:e9:d0:cd:72:d0:16:4f:44:
f4:7d:13:e3:95:f4:82:14:35:ec:cf:62:a3:d7:77:7d:f6:01:
54:51:6b:28:d3:ac:c9:58:d9:a5:e9:9b:9d:05:de:83:82:8a:
12:5a:9c:08:70:0d:81:69:14:2b:df:dc:9b:49:a0:c4:ed:1d:
4f:07:bb:0c:fa:76:0e:21:c6:e1:1c:0d:fb:28:d5:69:f2:8d:
66:6e:c9:ae:08:54:26:98:34:74:60:5e:52:f8:60:b6:6d:64:
f0:61:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:22:10 2025 by rpki-client