Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: YL9FPlQYVhCVWOse0D35dLVxDSBvdSBStN6YzHGs0P4=
Subject key identifier: F5:E1:A5:12:94:C7:E5:DD:9E:8D:17:7E:06:4C:75:E5:A8:6F:71:7E
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 019847ADDBCAAA34433D556AB00FD8C37A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 1505
Signing time: Sat 26 Jul 2025 17:00:32 +0000
Manifest this update: Sat 26 Jul 2025 17:00:32 +0000
Manifest next update: Sun 27 Jul 2025 17:00:32 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: 8V7O1ceWuti3AFGCJ9W8Lumdiy5fA7PGQEiMo/iSbeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:db:ca:aa:34:43:3d:55:6a:b0:0f:d8:c3:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jul 26 17:00:32 2025 GMT
Not After : Jul 27 17:00:32 2025 GMT
Subject: CN=f5e1a51294c7e5dd9e8d177e064c75e5a86f717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:a5:3a:81:b7:0d:1a:a1:53:4d:0d:9a:bd:
64:2d:fe:66:b9:04:ab:21:f9:a8:8f:3c:53:66:10:
0a:35:07:a6:36:4b:0d:f9:7c:00:40:bf:f7:03:29:
6c:f6:49:2b:20:f9:77:82:72:ff:ea:78:8d:72:e1:
b7:a2:fd:8f:e4:9e:b9:56:48:6a:9a:18:f8:5d:4c:
f4:1a:6e:11:09:85:38:8f:44:14:f6:4a:6f:6b:f4:
43:22:26:c7:fe:78:88:93:da:a9:b1:56:68:e1:bb:
ab:08:45:0c:be:d2:ed:9b:4f:3e:79:31:d5:96:05:
35:56:04:24:53:e9:ee:4c:e9:b5:d5:3b:d6:28:e0:
6b:49:35:37:f5:ce:91:44:3f:31:3a:e6:cd:05:fc:
61:04:c5:ee:55:06:f3:33:1c:85:1a:08:bf:f6:78:
43:ef:50:55:fc:89:08:2f:62:9c:84:09:8f:ab:72:
06:83:56:29:95:94:bb:6e:f4:de:07:99:f9:0e:68:
5a:4c:43:10:c4:6b:be:6b:58:fd:95:62:3c:43:bf:
28:d2:5a:0b:6c:e2:3c:72:86:61:9b:45:b0:6c:72:
6d:46:99:f7:45:e0:1a:ec:c9:0a:49:d8:30:b0:5e:
74:ea:df:b6:b6:1c:6b:07:8d:c8:c5:4e:fd:ed:77:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E1:A5:12:94:C7:E5:DD:9E:8D:17:7E:06:4C:75:E5:A8:6F:71:7E
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:05:28:b2:a0:dc:a9:ea:d3:76:34:6e:7f:1f:05:e2:ca:
ed:14:ee:e1:78:f6:30:b8:f1:c9:66:e5:db:21:18:8a:8d:7b:
aa:bf:ca:9e:46:d6:43:c5:b9:25:f5:d3:a4:2f:9e:eb:ac:76:
41:07:92:ad:db:bf:b6:29:b3:1e:88:be:2d:20:a6:56:fa:ef:
35:80:67:68:a1:9d:6c:81:a0:9b:75:97:ad:8d:7f:43:99:cd:
e0:66:be:5e:2d:2f:0b:df:73:8d:3f:ba:e5:d0:18:38:2b:7a:
3e:7a:a3:02:3f:00:ce:fa:c0:5a:ab:60:02:41:a7:b8:e6:88:
ac:3e:ef:17:34:8c:5a:d6:30:3c:f8:72:b9:7e:72:36:5f:4a:
14:64:a6:30:ec:03:65:e7:c0:1b:bc:e4:99:9c:83:4f:6d:65:
19:e2:60:9a:2a:e6:01:5e:85:b6:bc:d6:5b:57:96:80:15:63:
e5:13:ef:88:7b:16:a2:e4:44:ac:99:cd:54:0f:3b:f3:6b:f0:
aa:65:c8:e8:86:0f:d8:6e:81:77:e3:0b:91:dd:2b:3e:4a:02:
73:c2:bc:a6:8a:ae:56:8c:07:91:62:46:c7:aa:e4:b8:cc:64:
21:7d:07:17:79:4c:16:65:1f:5a:5b:81:0b:4a:22:97:34:32:
8a:90:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:47 2025 by rpki-client