Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File: zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier: y7WAGzXjl8ULe9JlPOYTSgK5CCgvv4lKASC0zXKQb9Y=
Subject key identifier: CB:7F:41:C1:EA:A4:B8:B8:0E:1B:FE:0A:EB:48:08:76:5B:C8:9A:BE
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 01984A4164D237F185C9DDF18BD07973F26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:56 +0000
Manifest this update: Sun 27 Jul 2025 05:00:56 +0000
Manifest next update: Mon 28 Jul 2025 05:00:56 +0000
Files and hashes: 1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: /Dh1Dpw5zOAIPEjkZ7Cv4BV0VXB0rpQ8pYUcnL2vN1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:64:d2:37:f1:85:c9:dd:f1:8b:d0:79:73:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jul 27 05:00:56 2025 GMT
Not After : Jul 28 05:00:56 2025 GMT
Subject: CN=cb7f41c1eaa4b8b80e1bfe0aeb4808765bc89abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:b2:19:06:9d:dc:cc:c1:27:8a:76:e1:ed:
8b:7b:8b:a9:3f:96:e8:a9:e8:fa:4f:ad:91:1e:78:
a1:88:10:80:7a:0c:7d:1a:d0:91:86:f6:3a:c4:6f:
01:cc:44:9f:f4:71:a7:5d:9b:f8:9f:11:d6:92:2d:
d8:94:c9:e5:39:ed:4e:51:85:0d:36:4f:ef:6d:8a:
ad:ff:4e:1b:69:67:68:36:0b:69:27:5d:69:19:0c:
b4:1f:d3:40:06:32:fc:6a:fa:a7:fa:d3:a3:d8:04:
1c:eb:65:06:51:9f:0b:d8:c6:0a:03:73:1b:9e:c4:
2a:05:f7:b9:4f:41:05:d9:45:cf:23:4a:60:e3:15:
26:d1:4b:86:fe:64:30:06:7e:1b:b4:75:58:54:c8:
93:40:71:90:1a:32:e6:b6:2c:b1:35:1e:7e:3e:38:
f6:00:63:3c:ff:42:da:01:1c:98:f9:07:4b:98:ac:
e9:d8:00:5e:5d:c1:70:2a:7c:58:0f:b2:23:79:cd:
2d:6a:67:87:97:94:ae:36:26:01:a6:44:e0:67:fb:
d8:ef:69:12:c4:5e:cd:34:08:f5:f2:c8:ff:00:3a:
d4:3d:87:7a:78:67:ae:25:f6:d5:da:c5:44:5a:a7:
63:6d:34:04:5f:be:6d:64:2a:4d:cd:39:7f:f5:6e:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:41:C1:EA:A4:B8:B8:0E:1B:FE:0A:EB:48:08:76:5B:C8:9A:BE
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:32:a7:ab:db:19:5e:20:13:dd:62:29:a7:d5:44:d2:36:fd:
5c:db:7b:c3:85:45:72:a1:fa:72:31:5a:29:5d:39:42:f3:17:
50:25:f5:fa:2a:92:e0:66:75:08:74:86:f1:0a:cc:19:c0:82:
a6:0a:01:96:fc:c4:bc:ac:28:78:3f:33:80:0f:25:c4:8b:1d:
5f:91:6e:ee:1a:5c:9c:2b:23:cc:a7:c7:d2:f8:82:73:d5:d9:
73:56:f1:16:65:82:bf:89:37:ed:f9:24:00:cb:b1:c9:10:41:
1b:36:53:64:97:68:42:d0:e7:ed:65:81:70:8d:82:fd:07:2f:
c7:75:37:84:0c:8d:64:d0:79:d7:db:9d:53:e9:02:b0:90:a7:
b3:3b:56:b1:fe:d4:f9:9d:90:19:6a:eb:6c:71:29:5a:02:17:
48:51:92:a8:af:10:0d:9f:80:e1:03:fc:76:05:85:b4:53:ee:
04:cb:cd:22:10:4c:4d:4a:74:33:0a:a9:b6:e3:0f:49:37:cf:
b6:31:88:ba:27:f3:8b:cc:ad:50:48:62:53:f4:05:72:0e:d0:
ef:a9:cb:bb:e0:ff:2f:50:6f:04:9f:f7:0b:45:95:39:23:f9:
b2:c8:ef:ac:8e:52:de:0e:7b:fb:3a:25:a9:40:01:02:58:b5:
aa:2d:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:18 2025 by rpki-client