Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: p891wcE7a0BUFwUn0aPuKtIeLQ7szGg6MKpiM7zmbkM=
Subject key identifier: D5:31:14:0C:CF:C8:8F:47:70:2F:03:57:5F:A5:CE:88:70:0A:66:1D
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019922C3416EFB5E42B5246122AB1483AA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0459
Signing time: Sun 07 Sep 2025 06:00:45 +0000
Manifest this update: Sun 07 Sep 2025 06:00:45 +0000
Manifest next update: Mon 08 Sep 2025 06:00:45 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: t1OhTNwH1VJnwjZzt2Xfgec0wLdH3aYSjJZpt2nO52c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:41:6e:fb:5e:42:b5:24:61:22:ab:14:83:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Sep 7 06:00:45 2025 GMT
Not After : Sep 8 06:00:45 2025 GMT
Subject: CN=d531140ccfc88f47702f03575fa5ce88700a661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:0b:e9:8d:c1:00:9a:1b:39:0d:6b:99:10:
31:dd:5a:e3:db:7e:f8:2b:a1:69:fd:f3:c3:87:0b:
23:f9:2b:27:36:df:1f:a4:80:0d:0d:53:c2:87:f9:
18:69:e6:f6:86:4a:f9:2c:31:cc:e9:ae:ec:f2:b3:
b4:ea:c1:46:c2:58:e3:39:bc:cc:b9:90:52:7e:77:
93:68:95:1f:4c:d1:8d:71:eb:14:4c:8e:d8:6a:8a:
73:a2:43:cc:48:e0:a2:b7:3d:1e:d9:12:ea:0b:1c:
57:59:d6:9a:d5:20:f6:9d:3b:f1:25:c8:98:cb:41:
b3:1a:44:b0:5d:5a:e6:dc:a1:95:f7:67:54:fd:30:
8b:85:01:2f:ab:09:67:6e:34:d3:73:fc:4f:d9:13:
54:55:d1:b4:e9:7a:bc:14:d6:d3:67:f0:3a:65:3c:
a3:c7:38:2c:62:c1:6e:6a:8f:1b:db:7c:e3:c1:e5:
c8:b1:99:5e:94:5d:00:85:ce:98:76:1a:ae:83:fc:
01:3c:3c:e7:d4:d3:ab:2e:8e:6a:38:0e:a0:96:c0:
81:d0:fd:c2:c0:7e:a6:a5:55:17:e1:7f:1e:67:e1:
93:b5:2c:31:0d:46:cb:82:95:22:ef:22:bf:21:49:
c5:35:8b:f2:ce:77:ec:af:b7:50:b8:4e:89:41:37:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:14:0C:CF:C8:8F:47:70:2F:03:57:5F:A5:CE:88:70:0A:66:1D
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:f9:15:ac:e5:f5:ad:05:75:71:d5:21:17:71:b8:7d:db:
a6:f4:a1:c0:7a:a3:7a:5d:5a:1a:2e:11:f0:ae:66:9d:4e:50:
28:d0:eb:db:6f:da:2f:c2:04:63:63:bb:41:94:34:30:3c:ab:
c7:9c:2c:9b:6c:1c:d4:ee:01:3f:b9:82:e1:39:4e:11:73:19:
41:a2:a7:ff:12:6e:b6:73:52:aa:e5:b3:dd:26:b1:f7:ef:38:
e8:77:86:ad:cd:99:f0:eb:03:3a:e2:cc:3f:40:a4:d1:ed:61:
1c:8b:56:fb:79:75:03:11:85:fc:53:d6:32:31:6d:5b:05:14:
ce:04:aa:03:17:be:63:a5:fa:89:f4:de:93:d4:b2:a5:9f:64:
9b:7c:9b:2b:d7:ad:80:e9:3c:b8:85:e7:01:1f:47:a0:1d:68:
b5:fa:83:32:13:6d:92:74:ae:7a:c5:60:ac:64:1d:a0:97:ea:
c7:f4:c3:a4:13:46:a2:97:fa:65:ac:84:85:aa:3e:e9:7e:09:
f4:05:00:f1:32:ac:c5:ec:9d:6c:9f:6b:f2:0f:82:24:b7:26:
33:01:6c:b0:a9:90:18:21:df:b3:fb:8e:1f:14:3e:ee:2d:78:
af:1c:68:ad:21:49:47:73:ee:b7:7c:5f:1c:72:2d:dc:a7:5e:
c6:cd:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client