Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: p6DcliL41ZlsaySTgE1QJNz3/38eyQ1ryoKZQxCNwXQ=
Subject key identifier: BE:37:45:EB:DE:F4:DA:8B:0B:0D:E8:89:19:19:F5:63:2A:46:F0:79
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 0198500CD010FDC84210DB6B139E2A425B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 08:01:13 +0000
Manifest this update: Mon 28 Jul 2025 08:01:13 +0000
Manifest next update: Tue 29 Jul 2025 08:01:13 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: yJ6psxiFZhn+wiaHHgl9t92DcH8LpuxZOhp32iKflZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:0c:d0:10:fd:c8:42:10:db:6b:13:9e:2a:42:5b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Jul 28 08:01:13 2025 GMT
Not After : Jul 29 08:01:13 2025 GMT
Subject: CN=be3745ebdef4da8b0b0de8891919f5632a46f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:8a:09:8c:d3:35:3e:76:45:ee:53:e0:ba:
68:94:6c:4d:c6:4a:6f:bd:27:f9:42:8f:dc:d2:7e:
bf:96:21:a3:d6:33:28:8c:0f:5f:30:34:f2:cd:2c:
a2:d7:f8:7a:d3:5d:51:9c:1f:62:b2:f8:e4:46:5e:
3e:a3:40:cd:a3:4c:8d:20:53:0f:f4:8e:3d:6c:65:
d2:c1:66:2c:54:94:01:a2:2f:12:0f:eb:ff:eb:3a:
b0:54:68:cd:5b:a1:7c:a4:ff:3a:76:fa:e5:b2:eb:
3f:23:61:2c:8f:b7:f1:ff:39:1b:6d:6d:40:da:36:
91:87:7d:c4:35:af:7c:45:51:cc:c6:dc:a2:04:b5:
6f:e0:01:ef:6c:f5:92:b3:ee:f6:1e:6d:af:65:92:
9b:4a:cf:24:98:1e:64:20:a5:58:66:b1:43:72:a7:
d2:fa:aa:dd:04:01:2d:2e:56:53:ba:3d:33:d8:8d:
a3:38:4d:d9:91:4e:e1:c4:65:5c:7a:1f:b7:de:3f:
8e:b9:58:0f:84:e2:17:0e:aa:08:4f:1b:fb:76:fe:
38:0a:69:c1:86:81:dc:01:34:bf:7d:10:05:4c:99:
c5:32:ba:f1:46:76:8c:e9:19:6d:74:ca:f8:b8:78:
97:12:89:1e:e7:e8:9b:5d:68:2c:d6:90:f7:84:1b:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:45:EB:DE:F4:DA:8B:0B:0D:E8:89:19:19:F5:63:2A:46:F0:79
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:ae:55:0c:4d:cf:f3:9c:8a:82:98:0c:3b:0d:82:f8:0c:
f9:92:81:1d:6e:e9:1a:e5:84:ef:ed:c4:3e:c0:25:a4:35:3d:
30:72:64:15:93:55:a9:83:0f:1b:bd:85:ff:f8:0e:69:7d:39:
00:94:41:ab:b4:31:25:e6:7b:84:a5:b1:50:79:6a:f0:e6:6a:
11:2a:56:1a:dc:5e:d7:d9:79:fd:79:cb:09:35:dd:bf:37:c7:
5d:d5:d2:3d:d1:11:41:ac:37:21:e5:f1:a6:2f:4a:73:1e:b3:
c4:91:e4:23:1b:40:7a:a1:a0:35:3d:ab:5b:58:9a:da:0c:03:
50:4e:d3:d5:a3:c7:07:46:cf:2c:7f:66:e8:0b:8e:54:0f:c2:
d6:f7:41:f6:70:cd:4e:e9:37:0c:ee:b1:bb:a1:e0:21:f7:4f:
a3:30:61:89:79:00:1f:47:49:ee:3c:f1:0c:fe:c0:f7:5c:cd:
d3:d8:83:06:f9:2f:1f:2c:9a:47:11:66:9d:04:00:7c:b4:1e:
76:22:8b:3f:92:25:14:81:fe:ca:1e:bc:c0:8e:25:e1:d8:52:
8e:d3:58:cc:44:c8:ae:04:5d:2a:15:5a:0f:65:b1:bf:2c:52:
b6:e7:53:1e:e9:d3:d9:c5:0c:62:c5:71:f0:22:62:c5:c6:20:
98:66:50:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhQDNAQ/chCENtrE54qQlslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4
NmYwMzcwHhcNMjUwNzI4MDgwMTEzWhcNMjUwNzI5MDgwMTEzWjAzMTEwLwYDVQQD
EyhiZTM3NDVlYmRlZjRkYThiMGIwZGU4ODkxOTE5ZjU2MzJhNDZmMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgyKCYzTNT52Re5T4LpolGxNxkpv
vSf5Qo/c0n6/liGj1jMojA9fMDTyzSyi1/h6011RnB9isvjkRl4+o0DNo0yNIFMP
9I49bGXSwWYsVJQBoi8SD+v/6zqwVGjNW6F8pP86dvrlsus/I2Esj7fx/zkbbW1A
2jaRh33ENa98RVHMxtyiBLVv4AHvbPWSs+72Hm2vZZKbSs8kmB5kIKVYZrFDcqfS
+qrdBAEtLlZTuj0z2I2jOE3ZkU7hxGVceh+33j+OuVgPhOIXDqoITxv7dv44CmnB
hoHcATS/fRAFTJnFMrrxRnaM6RltdMr4uHiXEoke5+ibXWgs1pD3hBsqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL43Reve9NqLCw3oiRkZ9WMqRvB5MB8GA1UdIwQY
MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt
MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4
LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMweuVQxN
z/OcioKYDDsNgvgM+ZKBHW7pGuWE7+3EPsAlpDU9MHJkFZNVqYMPG72F//gOaX05
AJRBq7QxJeZ7hKWxUHlq8OZqESpWGtxe19l5/XnLCTXdvzfHXdXSPdERQaw3IeXx
pi9Kcx6zxJHkIxtAeqGgNT2rW1ia2gwDUE7T1aPHB0bPLH9m6AuOVA/C1vdB9nDN
Tuk3DO6xu6HgIfdPozBhiXkAH0dJ7jzxDP7A91zN09iDBvkvHyyaRxFmnQQAfLQe
diKLP5IlFIH+yh68wI4l4dhSjtNYzETIrgRdKhVaD2WxvyxStudTHunT2cUMYsVx
8CJixcYgmGZQVw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 11:14:02 2025 by rpki-client