Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: DSZVdDYY1O820XkTClU14N3iGcxbcbOXY6qutRnJaMs=
Subject key identifier: 1D:01:BE:C5:1D:2C:AB:82:E4:90:FB:7F:A9:C1:2C:9D:6A:D5:82:BB
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 01984A411A69BD73EDF7DD4EBBFD7CDCE6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 12C0
Signing time: Sun 27 Jul 2025 05:00:37 +0000
Manifest this update: Sun 27 Jul 2025 05:00:37 +0000
Manifest next update: Mon 28 Jul 2025 05:00:37 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: Ii8qAKdIK/YGCYn3STBSj8RiGZsxyOlZY/Clso0iGGw=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:1a:69:bd:73:ed:f7:dd:4e:bb:fd:7c:dc:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Jul 27 05:00:37 2025 GMT
Not After : Jul 28 05:00:37 2025 GMT
Subject: CN=1d01bec51d2cab82e490fb7fa9c12c9d6ad582bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:85:9b:a7:ea:f8:d2:51:89:01:08:4d:9e:
7d:a6:00:41:e2:cf:6f:ca:f5:a8:59:42:ed:74:4c:
ee:96:d6:ba:f7:5f:a9:77:6d:61:1f:2e:2f:75:f7:
b6:33:22:6a:63:22:e0:52:df:62:8e:67:00:38:a6:
56:11:22:cc:fb:0f:00:f4:35:33:1e:6e:e6:96:9f:
1d:4d:5b:bc:08:a3:6a:08:19:24:0e:85:ba:db:dd:
22:47:f8:da:1a:8c:c4:0d:60:3e:7f:b7:ad:49:cb:
c1:40:17:17:a3:fb:04:29:72:10:6c:b1:08:b3:e9:
8b:3c:e1:01:49:d1:27:19:90:70:63:7f:56:c2:40:
62:5b:a5:bd:dd:86:0d:3e:36:11:43:ee:5a:db:98:
6e:b3:26:cf:b2:17:8e:b6:9a:7d:19:a5:57:43:c2:
40:4a:a3:eb:44:1f:3a:91:24:32:4b:f9:f5:2c:5f:
62:94:b7:de:bc:b6:ef:1f:5a:5b:d3:11:a0:aa:71:
04:29:27:dc:62:6b:97:78:72:4a:61:89:92:e3:05:
de:d9:b7:de:ec:63:e1:e6:d3:58:8c:cd:25:ac:94:
ef:5d:86:58:76:99:17:5e:37:4c:b9:1d:80:f8:32:
ab:3a:65:6e:4b:a1:1d:73:23:d8:da:bd:73:d7:87:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:BE:C5:1D:2C:AB:82:E4:90:FB:7F:A9:C1:2C:9D:6A:D5:82:BB
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:1d:03:c3:e3:51:d5:60:f0:86:bc:de:55:a8:d4:13:d5:
d7:c0:2a:32:e8:94:ed:59:b8:e0:31:d9:f8:ac:4a:15:9f:4f:
92:dd:91:0e:64:b9:4e:39:28:d6:40:fc:c5:2e:70:b9:7d:5c:
72:e1:59:35:00:ad:2b:7e:1d:05:42:d5:48:db:40:55:03:1d:
e7:01:86:22:7f:59:3c:b9:dc:72:9c:66:31:c3:30:ee:0a:8f:
ce:a3:e3:26:28:08:5e:01:f6:73:d8:6c:5a:85:45:7e:75:d5:
7f:cc:c5:74:3a:5b:18:ea:24:a4:5a:fd:0b:d0:bc:78:9f:b4:
51:64:67:2a:ce:72:35:d1:65:a9:53:d6:b1:7c:63:37:69:19:
16:90:84:cd:ad:e2:f7:d9:3f:9d:49:42:cd:5f:48:58:c7:c2:
7e:0c:13:db:59:39:10:94:27:4b:7d:81:f5:48:8e:ab:15:59:
56:98:60:ca:3f:db:ba:5b:a6:bc:55:93:86:44:7e:13:71:3c:
cf:ed:8a:28:ab:84:5d:15:a5:72:c9:eb:d1:0a:2f:2a:9c:e5:
6f:40:17:06:e0:c0:b1:6b:ac:c0:99:d3:90:cb:a4:f7:80:4e:
0c:26:ef:9f:47:4d:0e:c7:53:98:b5:38:da:9e:7b:6d:1a:f4:
fe:bc:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:46:03 2025 by rpki-client