Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: Qk5/PCajccKieYlhAuTLVhJNjU+8YHIdBFa8ffTE98g=
Subject key identifier: 38:89:75:26:D9:9A:41:43:05:C0:5E:FC:2B:DA:42:C9:11:97:4A:29
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 01984AAF4368794EBC1ECAA151FAECA37086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0501
Signing time: Sun 27 Jul 2025 07:00:56 +0000
Manifest this update: Sun 27 Jul 2025 07:00:56 +0000
Manifest next update: Mon 28 Jul 2025 07:00:56 +0000
Files and hashes: 1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: 8iWofnzCCx1QCy6ckq6HW7BBcBXTqdF5UkdUIm5JUv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:43:68:79:4e:bc:1e:ca:a1:51:fa:ec:a3:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Jul 27 07:00:56 2025 GMT
Not After : Jul 28 07:00:56 2025 GMT
Subject: CN=38897526d99a414305c05efc2bda42c911974a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:b6:84:8d:fe:33:ed:f5:43:34:04:81:62:
a9:20:57:62:ed:d8:13:4b:06:d7:24:89:02:a8:a7:
c3:c2:1f:71:0f:cb:13:02:20:3b:4d:04:32:2b:d5:
95:04:87:b4:c8:4a:1c:9c:34:b3:f1:80:3e:68:a2:
0a:f7:34:bb:4d:64:bd:0d:e2:51:78:1e:6a:67:35:
28:7f:2c:ff:af:76:61:7d:8b:10:4d:86:87:14:4e:
ed:c1:77:f4:48:76:9f:fe:e1:f9:25:20:0b:82:76:
08:fa:4f:58:6f:3f:25:14:38:f1:55:1c:7b:dd:d1:
0c:e2:c3:75:b2:1f:c5:36:69:b7:b2:f1:73:3a:20:
a4:e9:62:b0:19:f3:9c:0b:4e:6b:02:53:b9:e5:67:
29:ff:08:a2:f5:6c:86:24:7e:a6:fa:9e:b5:5a:50:
c8:2f:be:d5:c6:31:86:fd:8c:76:35:47:45:db:22:
48:82:09:9f:37:a4:27:96:96:bf:ca:bb:f4:12:84:
85:c2:1d:f9:eb:27:8b:d3:16:a3:1c:db:31:47:a6:
76:e3:c9:92:62:2c:6e:36:26:23:39:03:38:4b:f6:
cf:8f:d2:4c:69:2b:b1:6c:c5:2d:03:cd:1b:83:fb:
d2:8a:69:79:a9:2a:53:81:22:d5:b2:48:d2:03:8f:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:75:26:D9:9A:41:43:05:C0:5E:FC:2B:DA:42:C9:11:97:4A:29
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f8:2e:be:d8:6b:da:c2:1e:45:fe:c8:20:71:a8:55:13:9f:
c1:72:9b:66:8b:83:16:97:b3:36:2b:58:c4:5a:1b:d1:9c:6d:
c0:d2:75:10:b9:01:17:2c:b4:59:f5:2d:f3:1a:fb:2c:7f:20:
a5:95:1f:b3:f3:04:3a:88:d1:d3:ee:33:fd:30:5e:46:b4:e0:
8b:ac:b8:8d:9d:77:41:22:05:70:cc:43:04:e2:d4:bd:bc:e4:
0e:2c:ba:d5:40:de:2c:cb:8d:62:c8:7d:1f:7e:73:0e:e3:98:
0b:f4:7f:c9:f2:52:30:94:1a:fd:90:2e:5c:db:00:c4:87:23:
7a:a7:5b:84:02:51:11:4f:8a:85:21:7f:83:c5:3b:d0:54:78:
02:d2:1f:7b:9c:9b:a2:8f:3b:c4:57:0e:55:bf:1b:d4:f3:04:
ac:c4:1d:f7:91:51:85:3a:77:d4:a7:52:3c:77:e4:45:4a:51:
74:f2:3c:f5:4a:e0:ae:6d:82:a1:e5:7c:52:75:fa:fb:4b:d7:
81:f1:f1:82:9c:19:ca:a8:34:25:93:d9:31:3a:85:d4:1f:5c:
36:62:44:bf:c4:3a:f4:5d:37:01:1e:eb:c1:76:b4:b3:1e:af:
a4:cd:7d:86:da:e8:9e:b0:48:52:50:e5:e9:a4:22:73:ae:f8:
b5:32:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:54:26 2025 by rpki-client