Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: W+tu4K982CPZnorGxCks+w/vohXrUzOPO9AKLHStbGc=
Subject key identifier: DD:6B:32:B3:20:1A:02:A9:9E:6D:7A:88:74:EE:3B:58:42:40:4A:09
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01982710DB83448C4E052114AFB2318231A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 24
Signing time: Sun 20 Jul 2025 09:01:12 +0000
Manifest this update: Sun 20 Jul 2025 09:01:12 +0000
Manifest next update: Mon 21 Jul 2025 09:01:12 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: BJQfVeAYc3AXlo8bXxDm5mwt0xwC+TAt1Y6fCax+vhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:db:83:44:8c:4e:05:21:14:af:b2:31:82:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Jul 20 09:01:12 2025 GMT
Not After : Jul 21 09:01:12 2025 GMT
Subject: CN=dd6b32b3201a02a99e6d7a8874ee3b5842404a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:a9:b3:59:93:69:50:58:b7:47:98:42:6e:
a0:4b:5d:89:42:f1:fa:84:c5:45:91:21:c4:f8:bc:
f0:aa:c7:14:2d:10:ba:de:ac:3f:aa:cd:3e:b6:a5:
fa:58:b4:7a:2e:72:a7:a2:29:0f:9a:05:4c:6c:a5:
5a:9a:c1:0c:39:86:88:08:f1:e4:ee:6b:ac:17:e9:
fe:70:74:ad:eb:5d:1a:82:89:c8:46:9e:59:26:e9:
33:20:09:8f:c8:4a:0a:4c:67:48:95:de:7c:4d:fb:
85:b0:c0:b7:c1:1c:8a:f3:d1:3f:8d:19:b9:ff:e4:
80:17:6f:c7:48:38:3e:11:6f:d9:4d:e6:6a:8f:ed:
32:e9:25:32:8c:c1:10:80:9c:6c:2e:67:d9:1d:e5:
5e:ab:d5:9c:03:ed:ed:64:fd:0a:aa:f6:9f:4a:80:
53:dd:77:28:83:6d:92:24:c4:5a:5f:fd:e6:c0:0f:
32:da:26:da:4b:1e:6c:4b:fd:10:60:dc:51:c1:c6:
65:e8:22:18:14:07:10:c8:09:8c:b2:78:65:d7:2d:
08:86:e3:c2:81:4f:72:5a:ec:a4:64:64:76:06:24:
ba:aa:85:cd:36:d7:2d:af:c7:58:23:6f:01:71:49:
5d:b2:f1:25:72:ed:ec:92:84:74:0b:7f:7d:b6:e0:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:32:B3:20:1A:02:A9:9E:6D:7A:88:74:EE:3B:58:42:40:4A:09
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:c7:35:62:38:fc:27:ce:68:94:27:c3:f0:cc:01:51:25:
aa:29:80:44:b0:6d:ab:96:ed:39:8a:4b:86:6a:e1:30:ce:aa:
cc:aa:6c:1a:a2:f3:08:ce:d9:99:06:35:dc:ce:9e:40:e9:ce:
72:aa:1c:f4:a0:d3:ae:2c:25:6a:2d:73:fb:e7:a9:ed:fb:f3:
77:70:28:f7:e9:47:ad:9f:cc:97:8e:af:74:66:20:68:00:33:
75:95:93:2a:87:01:fd:16:58:36:e9:dd:ea:0a:ec:5b:e3:6c:
92:aa:78:70:ca:6a:2d:2a:7d:92:29:b6:5b:e9:9d:c0:39:5e:
15:34:98:af:f3:00:3f:8f:ea:2f:24:50:f2:d3:d4:16:c4:9d:
7a:f2:b5:3d:55:6e:31:0e:1a:4f:b7:db:62:e1:52:8f:53:c3:
bc:96:a9:31:d5:7d:9c:4d:21:f1:21:38:3f:86:be:e4:18:bb:
dc:1a:e0:6c:54:76:e0:0b:7d:7f:51:4f:c0:b1:fe:cd:77:57:
96:80:be:69:b6:65:0f:b0:2c:5b:27:c6:9c:e1:49:b6:62:5d:
60:c6:19:d2:15:79:4d:68:83:bf:7a:ae:3d:92:61:11:39:a9:
ac:11:21:bc:57:00:ab:a6:18:a3:4d:b1:18:92:6e:15:c2:5c:
c0:50:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:27 2025 by rpki-client