Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: 55p1DV2Cj/IwoYSnGF76THCq/bRpafnO5hopUdmYoZU=
Subject key identifier: 42:D8:FA:F3:B8:34:80:E6:C1:76:11:2D:11:1C:43:21:51:DF:AD:0A
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 019854FC0BE2F9B7C48B0E0B6111E9CA3A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1374
Signing time: Tue 29 Jul 2025 07:01:00 +0000
Manifest this update: Tue 29 Jul 2025 07:01:00 +0000
Manifest next update: Wed 30 Jul 2025 07:01:00 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: h/8rtMjMYXMRrfI2OzlgIIn2ScBJGCDsVpazeGK7klY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:0b:e2:f9:b7:c4:8b:0e:0b:61:11:e9:ca:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jul 29 07:01:00 2025 GMT
Not After : Jul 30 07:01:00 2025 GMT
Subject: CN=42d8faf3b83480e6c176112d111c432151dfad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:9e:ec:54:e2:ee:ac:b2:2c:0b:36:a4:1d:
08:db:b7:a5:a2:d5:20:b0:d0:14:e4:e9:91:35:eb:
b7:ae:ae:93:bb:4a:72:88:59:23:a7:be:1b:d6:66:
af:53:63:ac:e0:c3:56:04:3d:8d:57:5f:15:76:32:
d0:ed:53:23:13:ea:45:b8:e7:28:d5:c9:0a:a2:e4:
a6:53:ae:11:fd:f6:64:3c:50:aa:0e:75:cf:bd:a2:
71:7c:33:ab:dd:ba:40:e7:5f:d0:e8:18:49:2d:1d:
d0:bf:77:44:de:82:45:ff:75:e9:35:0d:ca:14:b2:
2c:d2:b3:d5:88:fd:6c:2f:d1:00:e2:1a:62:fd:44:
38:c0:5a:1b:95:af:ba:34:f3:1c:4d:98:3d:20:3b:
56:a0:10:1d:90:b8:8c:33:cc:a2:53:83:85:ad:e1:
e3:b7:99:41:07:af:92:ef:51:ec:4b:09:20:84:37:
5b:2e:85:4d:60:42:bb:bc:1b:d6:a2:89:d0:59:08:
b1:bb:46:22:33:0f:98:63:b2:37:7e:d2:f9:6c:81:
79:82:d1:fd:8e:e9:ca:74:ae:ba:29:2b:8a:7e:df:
c5:86:16:d7:20:7d:4f:d7:e1:2d:2d:c0:77:71:e5:
6f:8d:75:7c:be:2a:5c:76:be:77:0e:15:ea:17:28:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:FA:F3:B8:34:80:E6:C1:76:11:2D:11:1C:43:21:51:DF:AD:0A
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:f4:5c:bd:0f:37:15:00:e4:29:a2:79:b8:75:d9:31:62:
e9:64:10:dc:05:33:22:1b:da:83:a7:8a:3e:c8:f3:a1:10:83:
81:c9:83:d3:63:eb:6c:6e:27:39:0a:e4:99:e9:c7:2a:1d:06:
ae:af:db:43:a1:20:8d:5a:4a:38:06:41:f1:41:48:27:0c:0d:
40:d9:13:3c:44:7b:ee:e5:e7:db:6c:78:d7:f5:c8:d5:09:7a:
3c:1a:04:50:bc:53:65:f1:8b:97:01:9a:b0:c1:6d:38:35:df:
88:76:98:9d:bf:09:fe:30:45:95:47:9f:18:61:02:9d:5c:94:
3b:a3:78:09:ca:a8:87:07:ec:e0:5f:3e:4a:52:cf:13:96:15:
d6:fe:51:90:93:8b:8b:9c:f1:9b:83:c6:d3:d6:6a:61:fe:4d:
89:76:d0:d1:bd:af:b9:96:43:9a:a2:f4:77:3b:6d:18:61:45:
ca:93:b2:3c:47:66:cd:a5:ff:e4:7a:aa:dd:fe:f3:55:94:60:
f9:ec:53:46:60:8d:97:8e:aa:be:29:a0:e5:ff:3a:27:bb:1d:
94:6c:86:48:e7:93:07:e8:62:fb:41:c7:36:66:81:99:e9:ff:
b8:31:f9:2c:f1:cf:a9:89:57:ad:4e:0c:16:b7:a7:92:0d:23:
43:05:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:45:29 2025 by rpki-client