Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: lUrpv2M5Vdanx1pTy5yMOvrmDfQVD7ke8XbxK0e1XHg=
Subject key identifier: 5A:D7:49:7A:6F:1F:2C:BD:34:BB:C7:3D:98:EB:C5:01:2E:64:25:FA
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 01983A6062B5D4E9373111DCA6CE47E42E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0C25
Signing time: Thu 24 Jul 2025 03:00:51 +0000
Manifest this update: Thu 24 Jul 2025 03:00:51 +0000
Manifest next update: Fri 25 Jul 2025 03:00:51 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: QMHTM+DZPu0E0K1yHEXDVz561J3DGYi+bT8A/Isft3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:60:62:b5:d4:e9:37:31:11:dc:a6:ce:47:e4:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jul 24 03:00:51 2025 GMT
Not After : Jul 25 03:00:51 2025 GMT
Subject: CN=5ad7497a6f1f2cbd34bbc73d98ebc5012e6425fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:36:d9:84:c2:17:c8:6c:ae:5a:96:43:92:
21:ed:66:89:57:84:d7:a5:e2:77:b6:5b:85:fe:92:
41:60:09:ac:59:a5:a5:60:9f:d4:cd:e8:d9:eb:23:
67:da:17:59:75:26:d9:fc:de:7e:98:34:98:c3:ad:
75:82:03:3c:29:37:32:e8:e3:4f:39:9c:4a:41:5c:
83:a0:8a:be:d7:df:2e:58:71:18:9b:05:ec:3a:dc:
b2:e1:2f:e1:1c:ee:fe:fd:6b:3f:d4:ad:f9:fc:d7:
72:8e:68:fb:1b:87:da:78:60:56:b9:9a:b2:93:93:
55:e9:57:5c:d7:f6:cc:aa:75:56:bc:22:62:33:2e:
8f:2c:26:a3:18:cb:b6:bd:06:ef:d0:9d:1e:94:af:
1f:eb:5c:13:1d:78:86:7d:73:ee:0a:08:fc:31:f1:
32:29:92:ac:1a:09:f4:a5:f4:f8:05:d3:b1:94:b5:
81:6e:08:8d:51:79:0a:02:4a:a9:d4:f7:82:60:06:
20:fb:2a:d6:2d:ab:5f:44:e4:33:f8:b7:fe:1f:3e:
5a:0a:08:10:06:5e:1a:51:1e:b8:3a:3e:fa:12:f9:
be:35:49:03:32:98:31:9e:c1:02:68:89:48:84:2b:
1f:f3:63:06:dc:48:b6:7f:3c:80:b7:89:a1:06:15:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D7:49:7A:6F:1F:2C:BD:34:BB:C7:3D:98:EB:C5:01:2E:64:25:FA
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:aa:ac:a6:b5:df:0e:19:a8:13:40:74:43:32:98:74:a9:
8e:7d:f4:3d:17:65:8b:c5:2c:ec:8f:b2:76:79:b0:da:7b:52:
52:5c:99:01:57:6b:ce:da:50:97:f4:f2:c9:cf:f9:c4:6c:db:
fa:3b:5d:bb:f2:5c:b4:75:35:ef:ac:1d:6f:7a:12:20:80:c2:
12:ce:3f:83:31:ac:10:4d:0b:cb:dc:be:38:00:a8:55:ec:c6:
20:62:54:93:b4:5b:e7:fe:0b:e2:cc:45:fa:e8:83:f8:2f:0c:
4d:65:7b:08:61:a9:0e:af:39:28:c6:7e:86:7c:72:6a:c7:1a:
08:75:5f:5c:ea:f9:54:91:01:cd:47:3f:93:34:e1:52:23:1d:
41:04:21:7a:65:20:32:20:e0:8d:6e:ec:91:3d:2b:ba:4b:9b:
5c:a8:38:cc:2b:b4:40:33:a4:77:92:e4:09:27:98:80:79:c5:
1a:09:37:d6:fe:0b:77:21:56:89:e2:85:ca:96:83:a4:bb:05:
c3:91:0b:be:9e:1e:e1:e5:bd:d7:13:cc:1b:09:11:98:8a:38:
70:a1:ff:45:67:1f:a1:d5:bd:3c:49:33:5a:38:4c:7a:2b:ca:
65:3c:fb:48:a6:aa:ee:48:54:3f:96:1b:8a:57:58:9c:b8:e3:
c0:32:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:54:59 2025 by rpki-client