Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: Dxj6RTEe6LXk9BcMtQ+ASyB7C90ORAJ8sBWI0FZwg88=
Subject key identifier: B0:33:B2:5E:A7:DE:76:67:26:F0:C8:69:A6:11:C7:87:CE:44:7C:C1
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 01984A77DBEDD0D3A722784DD38656E8F905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 06:00:25 +0000
Manifest this update: Sun 27 Jul 2025 06:00:25 +0000
Manifest next update: Mon 28 Jul 2025 06:00:25 +0000
Files and hashes: 1: 40_j8EnMOslOGeaUGeLQNCGHg64.roa (hash: BOU6u1kQjKsVBkJf+h9lI/7YbpbYLn1ZXJQhHit/Gyg=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: I/cRUcIwHQV3NIRv4aGTfCz6s0ThEcrOxBGW0or5JLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:db:ed:d0:d3:a7:22:78:4d:d3:86:56:e8:f9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jul 27 06:00:25 2025 GMT
Not After : Jul 28 06:00:25 2025 GMT
Subject: CN=b033b25ea7de766726f0c869a611c787ce447cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:c0:95:c1:01:4c:19:15:24:12:bb:e5:79:
60:e8:2d:71:6d:55:19:7a:96:23:5b:f9:8b:44:a8:
39:2c:f0:8a:a7:42:af:36:6c:2a:ee:0a:98:8a:fe:
a4:21:6a:e5:8f:7d:70:83:85:85:6c:cf:1c:e5:70:
2a:d5:a8:a2:b2:56:e5:e3:28:11:e7:02:73:db:8a:
cd:30:7c:70:e2:53:4e:45:04:89:f8:c5:58:f7:19:
b8:ac:5d:e3:fb:8a:5c:07:80:30:ab:3c:7b:d0:dd:
1b:08:77:f6:99:0c:23:66:47:06:69:77:ed:83:35:
83:66:d9:14:0a:35:70:c4:fb:82:c8:2d:59:9e:03:
8f:34:b7:13:c1:98:21:2e:2b:58:f1:c9:d4:0f:08:
f3:b4:75:f6:76:d0:7b:51:cd:81:4a:9a:59:8b:38:
14:97:a1:b5:a1:36:ee:03:8e:42:92:4b:f3:67:34:
4f:b4:76:f2:2e:fd:26:30:0c:ae:fc:c6:fc:7a:96:
2e:9a:c2:df:d7:3a:28:5d:55:15:7d:0f:f1:66:1b:
ae:d5:bd:7b:93:66:a6:42:5d:a3:a4:d8:c3:f3:41:
8c:48:ff:f0:45:a5:be:71:70:f6:f9:23:b9:33:5d:
62:ea:7b:dc:63:22:69:b3:5a:fb:54:c8:c9:f9:1e:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:B2:5E:A7:DE:76:67:26:F0:C8:69:A6:11:C7:87:CE:44:7C:C1
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:a0:91:16:21:c6:61:24:02:6a:c3:02:03:cb:83:0a:cf:
85:4f:14:00:ba:bb:70:4f:09:e2:59:ca:79:97:f1:34:48:7f:
bb:1f:c8:6c:10:23:98:4d:31:82:be:61:df:24:9b:2e:60:87:
15:a6:af:09:e7:90:e0:2c:9a:38:85:6f:41:43:77:db:1d:f2:
2e:5b:be:be:b8:37:d9:74:c6:7f:62:22:ba:cb:f4:41:da:07:
16:23:54:a9:6b:68:e8:09:32:39:89:81:ac:98:42:e3:27:98:
e5:f5:6c:6d:98:5f:13:51:cf:a7:c8:27:ec:56:71:d3:29:b7:
39:d7:d5:9b:60:be:01:d5:a2:28:ab:71:ae:4e:01:e0:01:66:
0e:f5:87:e4:c0:62:16:5c:b5:2c:33:96:68:30:e8:61:77:d0:
f4:3d:57:f9:34:27:0a:d9:8a:f9:76:91:2a:ef:73:c8:91:7a:
07:37:65:0d:c0:1c:c9:16:db:33:ad:63:8a:86:b5:fe:0b:ea:
d3:99:6f:c0:ea:5b:fb:7f:e2:5a:04:e2:d5:10:b1:13:81:5c:
8c:71:c0:47:17:34:b1:bc:24:ff:c7:47:7f:15:cb:68:ed:a4:
af:eb:6a:6a:60:93:d4:de:3b:c0:2f:a1:fd:a6:34:27:18:39:
ea:91:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:13 2025 by rpki-client