Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: wjKm4XfS/V+lG6tm5sglaDvdTRheHQqsQnciCxYQRpc=
Subject key identifier: DA:61:51:95:6D:DB:4D:EC:A4:45:E3:DF:C1:4F:B7:6B:34:E2:FC:56
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 01984B547C21265536F24160F86CE26BA34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:01:24 +0000
Manifest this update: Sun 27 Jul 2025 10:01:24 +0000
Manifest next update: Mon 28 Jul 2025 10:01:24 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: /MSG39YayMMTYKkfcggvikRQMpNUcONfUam7zaaudhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:7c:21:26:55:36:f2:41:60:f8:6c:e2:6b:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Jul 27 10:01:24 2025 GMT
Not After : Jul 28 10:01:24 2025 GMT
Subject: CN=da6151956ddb4deca445e3dfc14fb76b34e2fc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:40:43:65:7f:3c:5d:f6:59:b7:29:c4:62:
a2:b9:0a:89:6e:21:66:20:aa:90:a3:93:18:56:a8:
29:f3:d0:a0:c9:d7:da:fc:70:2e:78:a2:81:f9:48:
34:0a:0d:4c:22:30:73:b0:52:80:cb:d5:ef:04:de:
a2:c6:ce:d9:db:02:e7:29:ee:37:f6:2c:18:a4:b5:
aa:b4:04:fb:0a:19:84:a0:c2:64:10:8d:e2:31:6e:
3f:8d:0e:d9:93:52:e2:db:da:56:da:6f:d3:0c:3c:
09:0d:97:46:38:09:8e:94:cd:b5:48:a7:81:75:45:
e8:55:0a:27:84:ce:20:40:22:09:93:0d:3c:2f:9b:
0a:ce:88:d2:3b:b6:09:ea:ac:24:da:e3:9c:99:b2:
cf:a9:bf:96:e8:1a:b9:20:9e:b4:b0:90:de:43:57:
ec:43:b2:37:3d:e9:31:e7:a4:81:04:1c:df:9b:7b:
fb:2b:71:32:5a:43:b0:8d:6c:25:87:32:c4:07:e8:
07:23:8a:80:af:8e:e8:fe:97:e3:4f:89:14:12:0e:
11:e5:2d:cb:fd:56:23:19:07:eb:9b:52:00:b7:0d:
f3:f4:e4:ed:26:6c:e7:d8:4d:ed:75:03:ab:0f:46:
9d:64:62:4a:f3:50:af:3b:27:c1:48:d3:c7:9f:7b:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:51:95:6D:DB:4D:EC:A4:45:E3:DF:C1:4F:B7:6B:34:E2:FC:56
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:32:be:8e:ec:47:7d:e1:77:4a:4b:88:40:ec:96:99:a9:
ba:fe:49:61:4d:ac:ae:ae:eb:76:61:0e:42:64:28:0d:5b:84:
c1:bc:b3:49:bd:d0:1d:ed:55:5c:03:f4:9a:a6:b9:61:52:82:
74:51:96:1f:b1:18:e3:aa:86:49:3e:d8:a7:2e:90:4d:3d:4d:
bb:4c:6e:cb:62:f7:a3:f5:11:04:48:d2:d0:22:52:e1:65:29:
4e:a4:d3:92:d2:89:94:30:5a:86:94:1f:34:cc:31:aa:b3:73:
fe:fa:0a:6c:8c:01:c0:ff:f6:d4:b9:7f:1c:22:88:d5:9d:a8:
76:f7:6e:51:93:dc:8f:94:8e:84:05:82:1a:7b:71:fa:7e:3d:
44:6f:94:63:f3:10:69:7d:0a:1c:96:bb:85:e1:ef:a9:34:bb:
fc:08:86:4c:4e:ce:f7:3c:ec:5e:cc:7f:f4:86:20:67:84:d2:
0e:a7:56:a6:33:e7:d1:06:4a:b3:2f:99:76:f6:c3:73:6d:ef:
1f:14:10:a9:75:bc:09:2e:90:7e:f3:a0:0a:70:6d:80:e9:f4:
8e:fa:55:e5:cf:15:d3:ad:89:36:5d:a0:38:d5:b1:88:36:89:
3d:ca:9d:61:dd:5a:06:13:63:af:6c:7d:d8:7d:4c:f4:57:91:
e7:ae:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:40 2025 by rpki-client