Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: 1mYU4W4hyAjUR4kwY1bempp788BTwgCMY7DTONcamkw=
Subject key identifier: 4F:F7:CD:1C:2D:01:97:28:34:F1:5D:A2:03:14:EA:BA:80:4B:85:1F
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019845883D7370567D89849D72F5E3251661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 07:00:13 +0000
Manifest this update: Sat 26 Jul 2025 07:00:13 +0000
Manifest next update: Sun 27 Jul 2025 07:00:13 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: P9m/BuzzacQs9gRALYLQ6UqBW9Luj3e8jhcN6aMHlFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:3d:73:70:56:7d:89:84:9d:72:f5:e3:25:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jul 26 07:00:13 2025 GMT
Not After : Jul 27 07:00:13 2025 GMT
Subject: CN=4ff7cd1c2d01972834f15da20314eaba804b851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:8f:cf:3f:e8:83:fd:2d:be:94:34:a4:f7:
da:14:b9:66:00:16:89:6f:82:bd:13:5d:ce:09:92:
b1:fb:5f:25:d4:77:82:47:4e:00:4b:d8:2e:ec:04:
54:b6:4b:75:46:85:c9:66:94:69:05:c6:57:b4:e8:
4f:5d:f0:00:94:c1:e3:23:0e:78:23:26:aa:35:95:
d7:13:e7:e2:f8:a9:73:da:44:ae:c8:ea:96:23:cf:
50:fc:43:8b:6d:75:1f:43:6d:c9:3d:53:d6:c9:15:
9f:97:f2:8a:f8:96:f6:f3:72:db:1d:17:b1:13:d1:
fa:78:78:6c:be:7d:26:88:1b:37:ac:b9:08:69:d8:
e9:ed:46:bb:35:cc:a7:6e:a4:92:1a:ea:eb:7d:b3:
bd:8f:45:40:34:d2:73:0a:f5:de:ed:00:b9:20:96:
75:3d:04:33:b8:9e:b0:c3:88:57:1b:5e:71:69:84:
4e:33:fd:b1:94:86:3b:73:b6:36:f6:0e:9c:6c:3d:
07:69:0d:06:e5:0e:2c:04:cb:34:bb:76:61:e4:cf:
e6:df:7b:5e:2e:dc:20:12:95:67:62:90:b9:47:8f:
7c:2a:51:e9:45:bc:53:cd:89:93:f5:a7:6e:54:1f:
23:a0:bd:d0:ab:3b:68:3c:d6:a6:60:dd:8c:01:3a:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:CD:1C:2D:01:97:28:34:F1:5D:A2:03:14:EA:BA:80:4B:85:1F
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:a9:c7:f3:83:75:5d:c3:47:e3:dc:2e:9d:b4:8e:b9:05:
8d:bb:82:65:eb:ee:a6:81:fe:32:8d:d8:05:be:16:ff:85:39:
9c:31:35:8b:13:24:5c:80:81:f0:a9:82:fc:40:ee:92:82:6b:
49:16:08:9d:e0:98:22:8d:28:4e:70:e6:80:0e:f6:0b:51:9c:
55:ec:e8:5b:f5:5e:c5:c3:7f:e7:31:65:83:2b:fe:8c:4a:d4:
da:34:f5:86:89:26:72:57:33:bf:0a:c3:a1:b2:69:08:08:3f:
57:5f:07:46:04:17:41:7f:73:ab:84:68:5b:f4:a1:bf:c8:8b:
29:db:4c:e5:2a:23:04:ee:f2:81:9c:e5:33:6a:27:62:e2:f0:
a0:33:bb:83:3d:f9:c5:8a:07:7f:ac:b5:8f:27:2a:c7:6c:16:
66:54:71:53:d6:2b:8a:73:9b:f6:2a:03:ee:a3:95:20:cb:40:
3f:30:dc:04:1a:b5:97:6d:bb:59:42:1c:9a:bd:e3:b1:88:33:
6c:ad:8f:d7:95:be:a8:68:7b:0e:77:c6:a4:f2:d4:80:a1:8d:
cc:b6:3c:4e:cb:ce:dc:fd:40:ba:a0:bb:56:5b:67:4f:86:15:
74:de:f1:8c:db:4c:1c:78:20:1f:92:71:20:1c:c5:8a:5e:07:
e4:ca:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:45:12 2025 by rpki-client