Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
File: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft (raw, json)
Hash identifier: xb5rxMNG12219lpCXv6QOp+/FwzU9tXr3fbIIP3gt+w=
Subject key identifier: D1:80:B6:13:61:4E:D9:58:03:3D:C5:95:C5:5F:93:8E:92:0E:0F:DE
Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c
Certificate serial: 019921B0DB9E706CC72E6338410DF6115CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
Manifest number: 047D
Signing time: Sun 07 Sep 2025 01:01:02 +0000
Manifest this update: Sun 07 Sep 2025 01:01:02 +0000
Manifest next update: Mon 08 Sep 2025 01:01:02 +0000
Files and hashes: 1: hGH_yKtqtaewmmke-m1I7cISSH0.roa (hash: T3QXU6gMQq0RcA3qUlvm1jUKiUtDYtXE4Lz78+TSbU8=)
2: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl (hash: B2fW9Bt8WNrCkzz/qqfyk3aFHc5goUQ0dUNDDkwIL9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:db:9e:70:6c:c7:2e:63:38:41:0d:f6:11:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c
Validity
Not Before: Sep 7 01:01:02 2025 GMT
Not After : Sep 8 01:01:02 2025 GMT
Subject: CN=d180b613614ed958033dc595c55f938e920e0fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:5d:49:5d:8d:0f:e2:81:75:4e:40:cb:43:
c9:5d:02:19:69:67:62:bd:fc:29:43:31:6d:1d:4c:
89:fc:04:f3:ba:22:44:15:bd:3a:58:14:ea:71:93:
9b:2e:73:1d:ce:8a:19:67:41:6d:5c:4d:45:cc:a4:
e0:39:4e:bf:2f:e2:14:ac:51:80:be:ce:69:4d:16:
13:5c:f5:f3:ee:75:1f:01:b2:d6:d3:cd:3d:6c:22:
69:d2:0d:25:68:53:3d:6a:f8:8c:63:e3:47:9e:5a:
e3:4a:69:b4:fb:7a:92:95:ec:67:b0:7e:6d:23:d2:
24:d9:ca:cf:2f:bf:b0:97:db:19:8f:82:f2:d7:ee:
bf:ad:25:83:d9:54:9c:b7:81:4f:3f:ef:17:6d:27:
e1:93:87:c2:e6:1c:7a:80:4a:46:3d:ae:e9:f9:f3:
11:d2:17:7f:d2:2a:98:11:b8:f6:9e:e8:7a:d6:b2:
6b:1e:b8:ef:5b:ec:ba:61:f5:b1:b4:c1:06:95:ac:
36:26:0f:32:a5:79:f3:e4:72:80:de:04:e9:53:9a:
3f:47:2f:30:c5:7f:d2:d2:a0:10:5a:8c:9e:0a:94:
86:5b:b5:81:92:d4:a7:31:a1:5c:22:7a:91:f4:29:
73:45:fa:57:9d:fa:b8:53:b3:43:ac:5e:eb:56:5c:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:B6:13:61:4E:D9:58:03:3D:C5:95:C5:5F:93:8E:92:0E:0F:DE
X509v3 Authority Key Identifier:
keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:30:ef:01:2a:55:f3:78:ac:1c:ff:2e:75:7a:0f:eb:98:
b7:b7:31:d4:18:15:48:e9:1c:a4:63:c2:d3:c8:7a:94:08:a8:
b0:c9:9d:cf:e1:97:05:69:42:2f:9d:bc:ba:6e:49:24:f9:00:
dc:a8:03:2d:4a:aa:4f:01:04:eb:38:71:01:08:5f:16:2a:0c:
60:5b:1f:20:31:b6:01:7d:0c:f6:fd:55:22:36:eb:fe:27:9d:
10:f7:1f:dd:34:8c:07:e1:7e:8f:3a:52:cd:a8:b9:0a:ba:67:
5e:91:c7:b6:78:38:29:e3:b8:e6:db:5d:d8:e9:4c:ac:20:bc:
27:a0:7a:95:e0:1b:47:8e:6c:cc:1e:89:c4:7c:42:f2:a5:87:
f5:f3:be:20:f9:65:a1:41:e0:31:19:70:54:10:00:c9:ec:48:
53:f3:6b:43:ab:81:ac:dd:4e:08:a2:c9:d6:c0:da:4b:8e:52:
b9:b7:66:47:5c:94:14:65:0e:a2:a3:fc:25:68:fa:2b:d0:0b:
e8:11:c9:e8:02:19:ab:13:3b:b6:d9:91:a9:44:37:41:30:32:
e8:e4:05:f6:5c:33:d5:c5:ce:3b:6a:c0:ec:b5:11:06:30:ef:
ed:30:42:52:4c:4c:2f:b3:4e:0a:3c:c7:aa:a8:82:05:81:86:
c7:56:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:26 2025 by rpki-client