Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: Da62cp0Q1M9rkErhVye3xU8Aycc1S52hWQiGD8VijQM=
Subject key identifier: 81:F6:EB:FD:49:53:4E:90:35:7A:7A:4E:B1:DC:25:C2:1C:DB:CD:E1
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019849D2E724B316EC43E660B4F8E80E6D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: rlB8Tn27S16zjTPWgTWzCtdwBaofg07h9wibbgZNlVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e7:24:b3:16:ec:43:e6:60:b4:f8:e8:0e:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=81f6ebfd49534e90357a7a4eb1dc25c21cdbcde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:ed:0a:85:9e:b2:97:0b:b6:54:7c:11:36:
ec:e8:7b:f0:20:71:33:08:91:4e:a7:67:8f:ca:38:
58:b4:7f:92:d3:ca:5f:13:60:46:d4:7e:10:2b:50:
6d:8a:7c:21:bf:12:b7:d9:22:de:2a:ec:28:b3:5d:
e2:d2:aa:58:2c:34:5c:5a:fc:b7:2a:8a:cc:cc:0b:
1d:31:af:a8:3e:06:12:54:5e:7e:98:57:3c:38:a7:
ac:6a:04:51:ed:6d:72:b1:37:79:b7:88:5e:74:7e:
6c:57:55:da:2d:25:d0:e5:44:22:6c:83:f0:f0:59:
e2:16:46:79:98:c0:f4:3b:61:eb:92:0c:7c:5c:90:
67:8b:f4:34:e4:9c:9c:45:4e:e8:ad:56:ac:3d:96:
9d:ed:4d:cc:ba:91:f0:04:d4:b9:95:45:01:f8:6e:
38:38:01:ce:0a:00:88:67:ef:0a:1d:41:cb:59:31:
9a:d4:9b:95:75:ed:40:a9:b8:ad:7d:4c:04:56:af:
41:23:58:e8:3c:a7:69:bd:d1:87:3e:fd:40:f5:79:
3f:ee:74:46:2c:84:d1:27:49:45:d9:3a:45:97:5f:
40:30:3b:63:8f:52:7b:45:36:ba:62:9a:f5:18:37:
df:ee:d5:61:68:eb:56:85:d0:71:0e:35:88:fe:98:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:EB:FD:49:53:4E:90:35:7A:7A:4E:B1:DC:25:C2:1C:DB:CD:E1
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:b8:88:91:0c:fa:14:72:78:40:5d:ea:13:b2:d6:c5:45:
a8:e4:c8:a8:62:f7:09:c2:73:32:df:2c:48:0e:a4:84:ca:1f:
bc:3b:8d:11:94:ee:eb:a5:a0:4d:c0:12:a6:ca:04:69:83:89:
87:ba:74:95:87:0c:7a:78:85:b9:69:4c:5e:2e:91:ae:93:92:
de:87:1b:d3:87:b6:6c:c8:02:6e:19:38:dc:9f:2f:ff:8b:24:
eb:23:14:a6:cf:ab:71:4d:ae:7e:cf:21:a9:a6:ad:1e:19:eb:
7d:77:4d:7f:67:bb:3d:e7:ae:4a:97:29:93:c0:54:eb:dd:47:
f1:61:0f:a3:1e:3b:99:64:8a:bb:ef:82:ce:a3:95:0c:c6:ed:
2d:67:2c:2c:f1:58:95:d6:e3:fc:23:d4:9c:44:ba:82:48:ed:
60:39:4d:c2:ac:0e:eb:0e:ce:2b:f3:bc:f6:98:38:ea:62:4c:
96:dc:bb:00:9e:40:da:ef:af:91:4c:7a:5f:ff:c5:13:e2:bb:
43:81:e3:7a:32:4f:7b:09:25:34:40:f2:a8:4e:5f:4b:9c:30:
fb:91:b0:fa:79:0e:6f:77:1c:8d:41:5b:a8:ae:3f:61:6c:33:
86:56:8c:4d:61:f9:ab:ba:bf:b4:53:37:cc:bf:3b:b8:8e:13:
37:b0:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:12 2025 by rpki-client