Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: 1BSgWXcveLm5iNxB5EHSQrQme16Q2HNskUD28dO5zzs=
Subject key identifier: 5C:FA:E6:F2:7C:12:9F:F8:C5:0C:E2:C7:8C:1D:AC:B7:E3:62:FB:33
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 01984EC2C1B501C185363D777157781DADA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 02:00:43 +0000
Manifest this update: Mon 28 Jul 2025 02:00:43 +0000
Manifest next update: Tue 29 Jul 2025 02:00:43 +0000
Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: SbMKF7NYuLSIVb8I6+l6KX9yVL2ESGuCxzSX9KkiuMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:c1:b5:01:c1:85:36:3d:77:71:57:78:1d:ad:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Jul 28 02:00:43 2025 GMT
Not After : Jul 29 02:00:43 2025 GMT
Subject: CN=5cfae6f27c129ff8c50ce2c78c1dacb7e362fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:90:17:ba:cc:12:35:38:22:0a:54:1d:60:
69:a8:f9:96:50:f1:17:41:05:ce:a7:cc:61:dc:c1:
69:ef:b6:3d:0f:43:03:25:4b:83:34:57:26:d1:fd:
4d:d7:71:97:4a:d6:db:b1:71:02:01:32:85:fe:3a:
4e:77:16:08:d9:9d:a7:01:57:05:0c:f3:97:54:03:
90:2a:35:e2:f5:96:d9:10:aa:9a:0b:0f:64:19:01:
23:66:95:e3:bb:a6:70:3c:05:ae:cd:f7:3c:76:61:
30:bf:11:92:47:fa:fe:7b:e5:03:d3:3c:2d:31:4b:
9f:fb:0c:9e:76:76:31:9b:4d:5e:6b:c2:c5:64:e2:
e8:e4:e1:5d:41:7c:8c:75:8f:c2:34:1d:5b:ab:9f:
57:17:67:f1:13:81:e6:12:40:e5:a5:29:a9:c6:90:
f8:8e:11:53:8d:3e:f8:13:3f:d3:20:24:09:5c:79:
fd:84:6b:ac:ce:a4:02:49:a9:43:b4:1b:d1:60:ed:
7c:78:a3:51:c3:46:2b:eb:6e:c1:9c:a2:da:e9:45:
43:9a:b8:db:a6:f4:2b:2c:ea:ac:7d:70:f7:93:0d:
7f:96:88:2d:ff:10:bf:27:cb:e8:36:3c:81:f8:b4:
28:14:5b:21:10:25:bd:f5:88:12:f8:c1:2c:09:bd:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:E6:F2:7C:12:9F:F8:C5:0C:E2:C7:8C:1D:AC:B7:E3:62:FB:33
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:73:4e:e1:01:07:42:cf:04:a6:0e:d3:ba:f0:86:67:a5:
08:7c:c7:c1:8e:47:78:1d:4b:38:e6:30:21:a6:ad:af:10:2b:
f6:05:3c:d5:2b:4b:aa:66:3b:6c:aa:08:af:f3:07:4b:a1:79:
2d:b9:90:4f:19:49:f3:a2:93:84:c1:42:eb:1b:00:0a:1a:a3:
eb:6f:e6:f8:da:d9:2d:4c:ba:0b:79:02:10:ed:49:db:f5:61:
8f:ef:c0:8d:d6:a1:e7:45:56:5e:eb:73:f7:62:0d:e8:09:db:
9d:58:75:e9:dd:3c:5a:06:ef:28:dd:d6:72:ec:cf:5c:77:3d:
a0:ba:ff:41:a7:2d:7a:73:e1:08:14:b7:67:e6:99:15:59:0a:
c3:49:5a:51:4c:b1:a8:06:45:5a:f3:6d:50:f1:12:6b:24:26:
45:10:64:9d:11:d5:81:92:7b:fd:d1:a8:66:b3:6c:71:b5:15:
fe:d3:27:6f:86:cc:eb:39:3a:5f:41:71:8e:65:99:00:ca:9f:
40:c5:eb:88:c7:64:d7:e8:70:47:4b:a0:a2:b5:e2:0a:82:f2:
ad:82:15:af:85:dc:56:cf:00:5b:36:f0:74:74:7f:ac:c8:c3:
5e:59:db:09:bc:7b:01:fd:83:be:d5:f1:7a:ea:53:76:cf:a0:
98:a5:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 10:53:53 2025 by rpki-client