Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: 3M3YSfMdnNNhs5HZm/h0/5s8OOgaPjzCPfvWMteKzEQ=
Subject key identifier: 09:F9:8F:18:91:C0:87:6E:B1:A4:94:5D:4F:AE:20:BF:84:FD:5F:43
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 01985B351CE3688CDCDDAEEDBAC9250455BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 01BF
Signing time: Wed 30 Jul 2025 12:01:04 +0000
Manifest this update: Wed 30 Jul 2025 12:01:04 +0000
Manifest next update: Thu 31 Jul 2025 12:01:04 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: vTxu23jrwuZYLHxCLQp6WSAlnvSqqa1mXhrPb2j9zV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:35:1c:e3:68:8c:dc:dd:ae:ed:ba:c9:25:04:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Jul 30 12:01:04 2025 GMT
Not After : Jul 31 12:01:04 2025 GMT
Subject: CN=09f98f1891c0876eb1a4945d4fae20bf84fd5f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:46:5f:57:fd:a3:be:30:ce:b1:39:9b:e7:
79:f4:78:13:79:5a:64:ce:b2:32:1d:29:91:ee:01:
c8:e7:9a:09:73:86:62:31:05:51:ba:fd:59:29:16:
07:a1:04:51:14:b6:2e:79:05:05:b3:e0:e2:c2:52:
95:f1:e1:26:ee:0a:de:93:06:40:3c:9f:5a:3c:62:
c0:36:4a:b2:e4:98:9c:af:8f:15:5e:80:1c:8d:ff:
44:1c:c1:4f:65:cd:3e:c1:fb:43:9a:86:11:ff:9f:
10:73:b6:51:29:57:19:1d:36:e0:24:8d:23:21:a7:
f2:f7:fb:4c:e5:aa:5f:e6:9a:53:4b:eb:1e:59:80:
b7:67:9b:c2:e6:72:ba:95:6d:81:9b:4f:72:b5:32:
93:c9:e7:ce:bd:f1:8d:e6:31:9b:3e:38:d0:ac:8d:
e2:00:7d:b7:7a:fb:41:42:0d:d3:be:8e:bf:59:ff:
3b:7b:78:14:7a:88:2a:46:10:c0:ff:44:df:86:62:
c8:cb:33:c0:83:a5:65:c9:28:a0:f3:58:86:66:80:
6d:45:12:43:e0:5f:ab:f9:c2:b4:de:96:5e:82:59:
83:01:34:d0:46:9b:b6:cd:e5:95:d4:0a:db:f4:31:
43:85:4b:8f:ef:4e:c4:fa:b4:c8:de:1f:26:2e:db:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:8F:18:91:C0:87:6E:B1:A4:94:5D:4F:AE:20:BF:84:FD:5F:43
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:40:74:10:68:c0:4f:45:27:27:17:1b:62:2d:47:ca:44:
1b:32:c5:28:6e:71:65:74:fa:0f:6a:74:a4:09:ef:2e:07:1c:
c7:fb:9d:26:df:cb:1f:b3:a3:2c:23:d5:2b:5e:48:71:4e:99:
02:a9:ae:f5:73:78:1e:e5:a0:bd:f1:fb:9d:5d:fe:66:38:86:
45:52:87:49:d7:11:ce:3c:70:7b:78:4f:18:7c:8a:7e:9a:0e:
4a:74:31:8e:1a:60:2f:34:5d:4f:06:54:73:8b:eb:7a:d5:36:
4b:e9:60:74:60:8b:53:f2:7d:f3:c3:a9:78:0e:bd:2a:6e:50:
5c:1e:68:3c:5b:2f:e0:52:ab:40:17:fc:be:3f:31:04:10:b3:
2f:bc:20:ef:7d:bb:22:53:ef:47:d4:a5:5a:ea:3a:64:45:ba:
3a:72:51:6f:b4:6b:27:13:e0:94:f7:62:08:13:17:c7:7c:09:
05:0b:d6:aa:a1:90:c0:f9:11:3c:e3:9d:79:6e:df:ce:5b:e4:
53:13:50:53:50:4d:74:ba:b4:74:94:5f:20:66:1a:87:16:bd:
4e:11:62:5e:54:ca:91:0a:92:38:35:57:b6:82:18:c4:35:b0:
9d:b5:29:69:4f:ad:88:da:2d:71:60:d1:b9:7c:45:f3:27:27:
23:62:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:29:48 2025 by rpki-client