Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: iSts/q6APSFxO/vnXly86MO3yJuBAqdv7APxnrLhiMk=
Subject key identifier: 63:3B:FD:7D:1E:C4:11:FC:37:22:99:BF:6B:8D:DA:56:B3:C2:8A:9C
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 019845BF9CF32C25116E739BD2F30D105A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 08:00:42 +0000
Manifest this update: Sat 26 Jul 2025 08:00:42 +0000
Manifest next update: Sun 27 Jul 2025 08:00:42 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: Obym9jDYofWJVDZ9hoVjW3O7HvFALMhAqmM7YTcC6js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:9c:f3:2c:25:11:6e:73:9b:d2:f3:0d:10:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jul 26 08:00:42 2025 GMT
Not After : Jul 27 08:00:42 2025 GMT
Subject: CN=633bfd7d1ec411fc372299bf6b8dda56b3c28a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:80:18:ba:56:03:36:0d:d9:e7:44:87:43:
d9:cf:53:10:24:71:aa:c7:07:d5:02:7f:b4:e0:45:
70:d6:3b:1e:01:48:ff:2f:22:a2:81:dd:d7:8f:9a:
ee:e0:f1:32:52:82:b0:a1:8e:34:07:3a:f6:64:4c:
bc:c6:49:73:8c:0a:4e:16:f0:74:b6:ab:3d:df:1a:
60:b7:8d:cb:df:5c:3d:13:d5:73:a7:71:75:1b:55:
a4:9f:f5:9c:60:5c:7b:40:5d:4a:10:45:9e:84:1f:
cd:bb:6c:66:46:e6:d1:92:cc:91:e1:3f:26:43:e2:
e0:2b:79:34:9a:01:7d:83:e2:1e:f6:96:87:77:66:
d6:a1:cd:01:bc:f4:93:c8:54:c0:ac:14:6d:18:92:
69:17:f4:ae:27:24:0c:f6:34:0e:65:5b:29:25:29:
ee:40:4d:84:c3:98:ae:8b:0f:a1:e8:10:b2:c7:eb:
5e:22:af:eb:b3:37:84:86:d3:33:f7:82:a1:39:44:
6f:a3:cd:65:ad:ba:ec:4c:4f:a2:e9:f6:12:64:a3:
28:11:ad:93:4b:24:b8:7b:f2:e1:98:70:bd:49:b4:
b9:22:56:63:d7:c2:37:4f:e2:8a:51:0f:20:a0:fb:
6c:6e:7d:74:a5:24:52:b1:9b:c2:8b:54:17:2e:92:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:FD:7D:1E:C4:11:FC:37:22:99:BF:6B:8D:DA:56:B3:C2:8A:9C
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a9:59:e1:3a:3f:3f:93:4b:02:9c:e9:dd:6c:26:1e:e2:c9:
e2:d0:eb:07:fa:d5:75:7f:d2:d2:18:d8:49:86:a1:a8:88:97:
68:31:a6:6f:6a:c6:17:6e:ed:34:67:bb:90:58:3d:84:f9:59:
83:1b:83:bf:2f:55:16:8f:32:59:a6:a8:e3:df:fb:37:9a:c1:
76:16:4c:88:eb:87:b8:76:51:2d:81:3d:ff:1e:82:86:7b:65:
5e:51:e9:44:4d:9c:c6:48:9a:30:cc:64:cc:65:92:63:61:b5:
2d:4f:92:fd:2c:f9:ca:17:c1:13:c2:05:94:7b:4e:b7:27:97:
98:5d:ab:d2:e8:32:5d:47:dd:b8:f8:e6:e3:a1:f0:cc:06:ad:
19:1a:bf:fd:9c:6c:db:8e:7d:8c:25:72:33:ce:a7:2c:75:2e:
67:ac:f1:c9:d0:be:ea:3c:b4:1a:88:fc:8d:05:8b:3d:ee:63:
c0:5a:50:5a:28:3b:ba:d2:dd:28:4d:9d:01:55:d7:56:b4:32:
c0:31:4f:20:c3:bb:d7:9e:83:9f:73:64:06:38:7b:46:de:85:
6b:3b:66:8b:2c:47:f1:e1:c0:e2:f1:46:c8:b3:8e:4b:57:3f:
4c:ab:cf:6c:80:54:15:81:17:d4:0c:25:28:16:a8:e9:7a:12:
32:fe:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:12 2025 by rpki-client