Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: FC17QimelX2D6m8lwuqpMdyQmfO7olSvqQAP7QJ352w=
Subject key identifier: 55:93:28:2F:2F:92:66:9C:95:E6:08:52:E5:38:75:10:DF:BD:98:6E
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 019847772AA32153C8173C8FD1E94B9FB66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0A65
Signing time: Sat 26 Jul 2025 16:00:48 +0000
Manifest this update: Sat 26 Jul 2025 16:00:48 +0000
Manifest next update: Sun 27 Jul 2025 16:00:48 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: jEEyY9KRVKO5gVJoGF29POaaxfLvf8f+Dw5hKIHdL4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:2a:a3:21:53:c8:17:3c:8f:d1:e9:4b:9f:b6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jul 26 16:00:48 2025 GMT
Not After : Jul 27 16:00:48 2025 GMT
Subject: CN=5593282f2f92669c95e60852e5387510dfbd986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:6b:dc:c4:f4:54:37:1b:44:5c:5e:2b:23:
0d:5a:20:f8:7c:65:2e:0d:15:f8:3e:db:2a:65:e0:
32:1c:43:5a:a1:67:0e:51:bf:26:bf:0a:40:47:33:
ed:14:20:16:82:05:3b:11:35:2b:c9:1a:d5:ce:ba:
9d:68:66:64:63:25:72:8a:9d:6b:ef:a7:ad:72:3f:
aa:1a:52:ac:88:46:ae:96:a6:43:6b:bc:ae:32:c0:
ac:d8:5d:58:c5:55:75:7f:d0:4f:5c:af:f5:5e:fc:
4b:d2:45:d2:2d:f5:05:58:9e:5a:c3:a9:bd:77:07:
e5:0a:d5:c3:7c:14:da:ff:a8:78:15:3d:ef:e0:7e:
ab:08:b9:21:40:10:95:3d:81:34:d9:70:19:1c:00:
18:64:e2:4b:8f:12:9f:81:d3:67:21:e9:eb:02:2f:
f2:0d:eb:1f:fa:17:ef:02:7f:fa:0e:7e:8c:7f:d9:
61:df:2c:6b:38:59:dd:87:8e:92:5c:3f:e0:14:4a:
d4:74:22:a5:06:b8:55:6c:2c:bc:0b:2a:a0:23:12:
5d:15:d8:00:6d:d3:b7:cd:ed:81:d7:c1:25:9c:09:
c1:5a:8b:ab:c3:7a:39:85:07:ea:ea:ad:b4:d7:a4:
b2:70:4e:a3:d7:b9:65:22:45:8a:81:f7:4b:f4:01:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:28:2F:2F:92:66:9C:95:E6:08:52:E5:38:75:10:DF:BD:98:6E
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9a:98:88:70:b3:b5:40:8f:c2:cd:81:ea:ed:d7:77:6e:88:
8c:8a:93:36:c5:8a:bc:1c:fa:80:1a:3f:66:da:42:0a:91:71:
33:67:97:52:c7:52:0f:36:01:d6:10:e7:c4:e7:76:80:9a:ce:
60:de:f2:3d:df:e9:8b:2f:12:b9:23:9f:48:ea:8a:68:71:59:
3b:d3:25:b7:ec:86:2b:0d:03:83:bd:79:20:6a:af:3b:8b:f3:
ba:6e:de:78:d4:d0:3e:7e:ff:b7:97:42:d5:f4:87:af:44:f9:
71:ee:14:7b:02:de:06:79:35:3e:73:6d:a0:9b:53:71:d7:ff:
0f:29:ae:97:70:a1:a5:eb:6b:a0:45:4a:28:d8:f2:5e:a3:54:
fc:bd:ca:ca:94:e2:43:a8:70:c6:db:e5:65:ac:35:a8:01:4b:
3f:79:44:8a:8d:ca:44:77:c6:f8:6b:3c:68:31:49:40:01:ba:
57:72:52:2e:2d:0b:d4:89:d7:f2:1e:a5:19:8a:a8:a7:ab:de:
84:ce:b1:48:00:33:15:fe:a4:6c:58:d0:f9:c7:56:f1:8d:25:
a1:dd:4e:7b:fe:af:f7:4c:62:f6:18:ae:f2:28:e6:65:a0:d0:
89:8d:9a:98:47:d4:58:bd:2c:47:e8:74:93:63:d5:c2:e1:27:
4d:50:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:29 2025 by rpki-client