Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: 43gL0TqOden9UBoPNpEreFxCAahD+vzpWytP0Zj5DnY=
Subject key identifier: F7:23:1F:28:06:E8:8E:55:E9:90:42:7C:7D:88:A4:03:72:4F:44:65
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019826A25D418933CB83EB6FE9280FAB92D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 01E5
Signing time: Sun 20 Jul 2025 07:00:31 +0000
Manifest this update: Sun 20 Jul 2025 07:00:31 +0000
Manifest next update: Mon 21 Jul 2025 07:00:31 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 4glVlXSCjphAtuIj7WCCiAWNl+sMeaREybYBGTnOMpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:5d:41:89:33:cb:83:eb:6f:e9:28:0f:ab:92:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jul 20 07:00:31 2025 GMT
Not After : Jul 21 07:00:31 2025 GMT
Subject: CN=f7231f2806e88e55e990427c7d88a403724f4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:2e:44:e3:bf:64:ed:66:95:d6:c5:42:53:
7d:76:68:3e:64:00:04:f9:3c:4f:1f:28:d1:30:49:
aa:c5:b0:7d:1a:7d:a8:0a:7d:1a:99:25:9c:24:e0:
01:4b:ae:02:c5:60:e3:87:0e:ba:b4:47:8c:d3:63:
8d:11:94:0a:dd:3c:92:7d:4c:67:06:c2:16:f8:f9:
66:28:9a:cc:ad:95:79:14:31:0b:5b:e9:c2:62:6d:
d4:c4:f6:d3:ad:8b:f7:39:c1:42:cb:37:3a:dc:22:
f7:73:73:8f:e6:56:d6:33:b6:47:10:d2:f7:13:c1:
7e:88:7a:59:a1:b7:4d:32:71:fd:48:de:2d:70:57:
43:27:a8:0c:27:6c:ae:b8:f0:40:eb:2a:b2:d4:97:
72:d7:6f:d5:ef:b0:5e:43:6c:9b:a7:33:61:82:2c:
a1:ab:72:ec:00:05:dd:9b:b9:e4:50:bd:d0:9e:d9:
ae:9a:c9:28:33:2d:31:c7:ed:21:a6:e1:42:73:88:
c0:59:57:98:87:83:07:6c:bb:fd:0d:2e:63:ad:92:
7f:a5:83:a7:1d:7d:cd:4b:c8:eb:85:1e:14:8c:33:
6c:98:d2:93:fe:2d:db:10:51:77:46:44:5f:9c:02:
52:86:94:26:b2:e1:d7:8b:ff:fd:cb:c4:a6:f5:23:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:1F:28:06:E8:8E:55:E9:90:42:7C:7D:88:A4:03:72:4F:44:65
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:50:5e:fb:93:82:33:b8:72:f1:bf:9a:01:34:9a:9a:0f:8f:
19:46:1f:49:e0:46:4c:fe:94:fb:b4:ea:aa:01:5b:3d:3f:42:
1d:35:0d:52:be:22:da:d1:49:0f:91:b8:bd:fb:ed:65:7f:9d:
89:2b:83:9b:98:08:7d:c5:47:22:98:90:fd:c8:38:24:0b:ed:
5c:66:c9:3b:17:34:c6:30:e1:94:e5:a9:e8:28:00:27:20:aa:
61:78:d0:85:3d:02:34:3e:d7:5e:26:da:45:41:79:7b:98:85:
00:29:7e:82:2b:ee:23:d2:2e:af:56:77:b9:bb:0c:28:89:2d:
09:aa:d6:25:9c:68:44:ea:26:54:12:53:75:22:ff:5b:c8:d4:
d1:f6:f2:9c:d6:34:e2:f6:1d:11:f1:99:42:0b:6a:cf:16:26:
43:30:e0:04:12:fd:d0:00:c4:dd:09:1a:68:4b:8f:68:39:00:
0a:c0:6c:09:1c:44:eb:7b:6c:49:c9:c6:b7:78:16:d3:7a:4a:
ef:95:d3:3b:6d:ea:5f:75:ba:73:12:fa:78:9f:9b:f2:a9:dd:
04:0e:a2:c0:f7:4b:51:e0:e5:42:41:9f:e1:23:0a:6e:af:ea:
96:3c:e4:13:f7:5b:de:cb:69:de:be:dc:fa:0c:3b:05:bf:48:
d3:58:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:16:35 2025 by rpki-client