Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json)
Hash identifier: uPcsulzt9l1z3PzjkIDYyMReHYMHBVil+7wReOyTVPQ=
Subject key identifier: 73:8C:D2:ED:95:7E:AE:F9:E2:57:3B:F0:6B:E8:7F:DD:10:70:CB:43
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial: 019854FB5D7E1C54C7F45FAC64FE92EE0AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 07:00:16 +0000
Manifest this update: Tue 29 Jul 2025 07:00:16 +0000
Manifest next update: Wed 30 Jul 2025 07:00:16 +0000
Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=)
2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: qsrJ1+w8Ulafk07v4RjbaQNRRsJxe/JBUl2YKM8/TN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:5d:7e:1c:54:c7:f4:5f:ac:64:fe:92:ee:0a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Validity
Not Before: Jul 29 07:00:16 2025 GMT
Not After : Jul 30 07:00:16 2025 GMT
Subject: CN=738cd2ed957eaef9e2573bf06be87fdd1070cb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:8b:8f:6d:0e:55:dd:51:6e:26:18:9e:c8:
6a:d1:e6:a0:40:00:4a:6c:a7:d6:95:a4:f8:a4:ba:
58:17:ac:91:97:fd:63:98:33:03:b8:81:1a:e5:6b:
1a:c7:9a:16:0d:7f:d2:29:ff:6a:58:ca:9c:25:75:
5b:52:99:d2:7a:60:cd:b0:2a:df:f0:de:d3:1e:9b:
1c:c3:09:68:dd:76:5f:51:56:b8:99:a0:da:4a:d7:
05:d1:7f:9d:d1:69:52:48:9c:02:c0:4a:16:36:e2:
eb:d7:2b:34:fe:f2:5d:eb:4a:45:79:24:a9:86:88:
5f:40:1a:37:fb:7b:16:03:cf:61:10:92:6c:58:bb:
d1:8f:bc:6b:ac:d2:45:2f:6e:03:24:69:f2:b2:7e:
b6:f0:56:87:08:2e:b7:f6:41:a3:87:df:db:71:3d:
fb:19:b2:63:8a:66:91:fd:db:88:4f:6c:02:67:4b:
b4:70:b9:14:77:0b:a5:84:7a:ca:76:06:39:48:28:
3b:ba:32:d6:48:ce:c1:19:5e:9e:51:6d:26:6e:ed:
9d:e2:47:22:31:bd:32:da:7b:f9:95:8e:e2:7d:84:
57:9b:19:7c:67:fd:ad:09:1d:98:02:01:e0:8b:a3:
c2:cc:36:7d:9d:d0:b6:9f:de:1b:45:d2:50:53:3e:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:D2:ED:95:7E:AE:F9:E2:57:3B:F0:6B:E8:7F:DD:10:70:CB:43
X509v3 Authority Key Identifier:
keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:e1:d5:4b:41:29:8e:50:1d:56:ad:b1:24:37:c0:3c:6b:
3d:9f:9d:97:58:33:18:a2:c2:96:e8:5b:0e:6a:0c:ec:2c:25:
24:8f:23:03:62:ea:15:4d:a2:90:f7:00:f5:a7:a3:80:b4:fe:
f7:c0:b8:ca:78:d8:f3:21:b2:9b:57:c7:4d:16:bc:e2:08:5e:
6c:6c:86:f3:fd:18:45:2e:62:50:c5:48:0e:a6:d4:9d:74:c2:
b2:7c:08:c7:91:cc:77:c5:a2:d7:00:63:f9:d5:4d:1b:c6:cd:
a4:e1:86:52:d1:1d:d6:8f:20:26:74:cb:47:1e:af:b6:55:76:
64:e3:25:c6:07:4d:40:07:99:10:51:f4:04:5e:9a:b0:18:db:
0e:f3:94:54:f2:a5:3d:50:b1:89:07:77:f8:e6:cf:11:45:ac:
75:8d:67:2d:68:4a:89:07:c9:8c:6e:83:1a:3c:73:2d:5f:57:
e5:db:5f:9d:3e:11:68:5b:44:8e:6b:28:f3:08:39:a4:73:a4:
81:29:0e:ef:56:d6:24:67:ed:20:56:91:98:c2:6d:8d:93:c5:
b9:a3:55:b2:94:03:1a:bc:fb:a5:b0:26:9c:1a:f5:02:12:af:
1c:2d:09:02:9b:52:c8:58:28:42:40:ef:68:8b:70:54:32:16:
68:14:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:30:17 2025 by rpki-client