Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: F4gQqipnBArAXGSsAlimOQzqfReFC5bsnZO1w0ejDWE=
Subject key identifier: F1:F6:5E:3A:EC:D3:C9:CE:25:2C:67:4D:5F:39:A1:35:CE:EC:83:21
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 019848C0F1BC65BA25FE307EC72C19B2BCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 1594
Signing time: Sat 26 Jul 2025 22:01:00 +0000
Manifest this update: Sat 26 Jul 2025 22:01:00 +0000
Manifest next update: Sun 27 Jul 2025 22:01:00 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: GPL+CSu9eW58twzrnvHR9THuUoFITnkQIpKrOgjDBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:f1:bc:65:ba:25:fe:30:7e:c7:2c:19:b2:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Jul 26 22:01:00 2025 GMT
Not After : Jul 27 22:01:00 2025 GMT
Subject: CN=f1f65e3aecd3c9ce252c674d5f39a135ceec8321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:83:66:77:58:a9:d9:3d:e4:b8:1c:66:74:
91:69:3f:13:82:07:e8:a5:31:57:6e:27:79:04:89:
ad:d8:84:c9:98:76:aa:08:58:bb:68:1d:3d:2a:cd:
5b:14:a1:5a:bf:7b:d1:76:5f:1d:38:e9:13:57:6f:
00:cf:6b:83:d2:e2:99:98:a0:4b:95:92:01:cf:93:
d3:48:b6:fb:b8:e2:2e:64:19:f9:83:63:d2:d0:6b:
43:a9:2f:81:ba:78:86:8f:ae:65:66:77:de:01:06:
7b:76:e4:06:67:a5:c3:3d:60:e5:5f:fe:76:66:7a:
93:9b:b4:0f:22:d0:23:77:ff:19:ed:27:86:49:88:
d6:1c:1f:85:25:8c:24:b4:b8:10:1f:b4:f9:97:6a:
e4:61:34:e0:29:ec:ad:88:1d:17:79:32:7e:96:33:
e3:37:bd:13:91:c0:0e:73:32:2d:ac:7e:eb:74:bc:
f4:a9:2b:c8:5b:08:44:d3:7c:5b:0d:9a:01:f5:4a:
24:46:14:1d:46:5f:4e:23:e1:2b:7f:ff:d6:a5:96:
89:c3:b9:22:8d:61:a5:cf:8a:87:06:09:0a:e9:07:
e1:1a:06:9a:7a:ce:79:04:10:90:ab:81:e3:39:bb:
31:87:8a:68:90:cb:31:92:e7:68:1e:dd:43:cb:ef:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:5E:3A:EC:D3:C9:CE:25:2C:67:4D:5F:39:A1:35:CE:EC:83:21
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:c6:ac:dc:15:e6:3d:bd:a1:8b:78:8e:20:5f:21:c4:61:
a6:e5:b8:87:54:08:4d:2f:c8:39:c6:4f:6b:e4:3d:06:fa:4f:
ba:e9:6f:66:16:6a:fc:21:1b:29:0b:34:cb:98:46:f6:e9:39:
5a:2f:99:57:2f:8d:1c:e3:fc:aa:cf:8f:e4:b4:72:17:e1:cc:
4b:1e:75:6f:95:a2:51:52:f3:a1:e3:2b:ad:38:a0:a9:e8:ff:
e3:23:49:2c:f0:81:01:a8:87:d0:0a:1e:8c:86:42:93:bd:f2:
e0:9b:4a:4e:88:55:41:4f:bc:c5:c5:33:6e:44:0d:d8:2c:50:
55:93:ae:99:04:46:2b:fb:20:5a:0c:f5:0e:2a:54:fd:b7:b5:
a8:c1:37:a5:b5:96:da:b4:d0:16:14:4a:a0:4b:af:87:87:95:
f9:6b:20:c2:f0:5f:3e:1d:34:bf:7f:a2:1a:e6:4b:0b:8a:a1:
d1:24:31:3f:1c:32:60:69:71:ca:c6:56:9d:a9:6f:fa:98:1d:
49:ae:e4:e5:be:91:75:86:75:c5:12:99:fb:15:ca:27:e7:9a:
90:01:ea:31:a9:2d:80:9f:53:ce:fd:16:1b:ac:72:f2:e2:82:
fa:8c:7d:66:38:a1:66:8d:9f:5d:91:f2:c9:50:1e:e4:d7:a5:
66:89:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:22 2025 by rpki-client