Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: xTP4+f/8UnoHkpwZ+xEN/JLTodQf68vI16qWNIPPjH0=
Subject key identifier: E6:E9:F2:AF:6B:49:68:22:65:7C:3C:6C:C2:70:D6:2C:34:FA:E8:B2
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0198578F672344960D2B38B787A23FEC5CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 03F6
Signing time: Tue 29 Jul 2025 19:01:12 +0000
Manifest this update: Tue 29 Jul 2025 19:01:12 +0000
Manifest next update: Wed 30 Jul 2025 19:01:12 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: Y9L8kMuF7YDjhGy34INJK6BwoNLc4cDyUv+oGBrtpaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:67:23:44:96:0d:2b:38:b7:87:a2:3f:ec:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Jul 29 19:01:12 2025 GMT
Not After : Jul 30 19:01:12 2025 GMT
Subject: CN=e6e9f2af6b496822657c3c6cc270d62c34fae8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:9c:f5:e8:ca:f7:47:8e:8b:d7:13:50:c5:
41:e9:08:04:f5:aa:1c:4f:bf:e5:bf:35:d6:cf:5b:
37:55:9f:f9:f0:b9:d5:e3:e1:a4:a9:5a:a0:e9:f3:
6e:e6:8e:87:15:a0:fc:da:29:14:aa:26:8c:c4:c1:
9a:ad:b3:7c:ab:e5:36:7a:6a:9c:ed:82:34:4c:ac:
c3:b1:07:b3:2e:f9:88:ce:e7:8c:ff:08:cf:92:3e:
b8:22:6d:da:f9:76:94:fa:4c:bf:f0:2a:37:59:f3:
4b:c2:0d:5a:bc:64:aa:94:70:1b:a1:21:a5:2f:7f:
d0:42:24:40:a4:98:65:a0:4b:cd:7d:71:ae:72:d9:
e5:64:81:52:de:85:76:56:9a:59:de:31:e0:3e:01:
d6:17:88:87:cb:34:4a:54:08:11:dc:66:00:77:b4:
10:42:47:92:6a:fb:3f:8a:6a:36:f2:9f:5e:3f:c7:
78:88:cd:7e:2c:c3:89:22:fa:40:c6:03:1c:e9:33:
1c:ef:89:ba:b1:2b:41:66:ce:41:44:c1:84:7b:56:
28:4f:35:90:c9:e8:42:b7:da:37:ed:30:cd:71:8c:
d0:92:e3:a0:d7:58:36:e7:3d:62:2a:e5:b1:a2:e4:
9b:10:86:50:c6:27:96:45:9b:db:d1:ef:6c:a4:25:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:F2:AF:6B:49:68:22:65:7C:3C:6C:C2:70:D6:2C:34:FA:E8:B2
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:37:27:a8:bb:ff:1c:cb:aa:db:38:c1:c4:2f:da:37:53:
0b:3e:39:dd:29:41:4e:ee:c8:fd:47:07:8e:43:15:12:3e:78:
bd:f2:45:66:11:20:8e:bd:d8:67:c7:35:f2:c8:e7:b5:ee:cd:
24:2e:0b:06:c2:d6:07:c6:5b:d9:8c:a1:93:82:d8:77:93:08:
25:c8:95:63:cb:bb:4f:fb:dc:95:55:b4:97:3c:02:e5:8f:41:
f7:0a:0f:76:d9:9b:c8:1e:f7:32:bf:76:4b:73:49:fd:ef:a6:
9f:88:01:92:d9:c7:cc:50:fb:4b:36:6d:1f:2d:67:55:76:5e:
7d:cf:92:08:31:49:ce:93:7c:e9:cc:8a:95:4e:44:bb:51:ab:
e9:39:24:33:a1:71:b0:9b:11:ce:b4:56:78:5c:e4:18:51:23:
5c:50:98:af:64:0f:ae:33:28:c5:18:3a:61:f0:f0:26:23:22:
55:38:c4:e9:15:ef:53:ba:12:00:ec:2a:f7:25:92:f1:e7:80:
39:3c:cd:01:43:72:e8:12:5a:83:72:49:80:af:2b:51:2f:da:
6a:b8:3e:6d:b0:e0:85:d0:36:1d:a4:86:b3:46:bc:13:4f:e3:
61:e7:5c:14:72:92:3f:66:bb:89:06:3d:de:73:c7:7a:de:5a:
96:a2:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:38:23 2025 by rpki-client