Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: FuDmRjX3/smovV4I1CCyPyMx1anLG2OLr25JVy9GEY8=
Subject key identifier: 86:B3:87:FD:7C:AD:57:9F:17:F8:AA:FC:89:B6:81:4C:1A:B6:DC:2C
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 019922FA115041CBB022189D6671205F40FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 13A9
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: RXMf3ODGMje0qCfRk4wFAImJsRChT6m7k0ZZXsrWsSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:11:50:41:cb:b0:22:18:9d:66:71:20:5f:40:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=86b387fd7cad579f17f8aafc89b6814c1ab6dc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:11:4d:ff:22:a3:d2:ab:89:59:40:64:b5:
b5:dd:0e:d2:30:b3:dd:24:00:35:21:87:82:77:c4:
79:d7:53:e6:bd:2d:32:46:ee:04:ac:ba:e2:67:e6:
81:41:4e:76:1a:6b:b1:3b:d7:31:0e:71:e8:e4:1c:
62:1e:f0:94:44:52:1a:14:47:c2:1f:89:c3:f2:15:
81:aa:9a:00:85:bf:ea:ee:82:53:fc:00:e1:48:47:
90:c6:9f:e3:1c:ae:f1:d8:c7:a3:24:fd:cc:d8:77:
fd:2f:3f:2d:9a:d8:6a:ca:08:df:26:72:7f:c8:46:
40:33:20:da:a6:86:4a:aa:94:a9:2a:0f:0a:27:3a:
e7:92:c2:69:47:b9:73:62:48:5c:d1:46:c7:2e:04:
e7:1c:8d:30:48:a6:7e:df:35:79:34:b8:29:3f:3b:
18:ed:da:ff:a4:16:85:7c:9f:b6:98:fb:43:55:0c:
b6:5d:ef:36:ab:89:e5:99:52:ba:34:55:bb:1c:96:
7a:95:2b:64:2b:c5:da:63:b3:2a:9c:8c:36:14:a2:
1d:59:95:44:4b:e3:07:67:0a:d6:fe:b4:95:f9:51:
b5:43:1b:fc:f2:4a:cd:0f:26:6b:84:65:ab:3d:1b:
df:82:02:26:4d:e7:83:10:2c:7f:cb:77:59:67:29:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:87:FD:7C:AD:57:9F:17:F8:AA:FC:89:B6:81:4C:1A:B6:DC:2C
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:93:ec:ed:44:1d:73:7b:0d:3d:fe:ae:56:07:01:69:a6:
bb:ae:38:10:ca:a9:f7:a3:1f:d9:11:24:6f:d6:c5:32:b4:fa:
4f:c3:7e:17:b5:e7:60:a8:cb:50:16:18:35:c2:8e:62:82:9a:
29:e8:19:3c:58:d2:ef:36:99:35:2e:44:c8:9a:13:26:e6:b6:
a0:81:d2:04:fe:be:c3:88:3f:c9:18:7b:69:f8:6d:ed:49:20:
5a:ec:70:da:ff:c5:24:e3:02:fb:16:82:9d:72:c7:59:8e:ce:
8c:44:06:4e:fe:64:10:0d:69:fa:69:6f:8b:53:25:39:f9:a0:
18:16:12:94:f7:b3:6d:e3:c5:f9:ea:6f:68:2e:4c:35:0e:41:
e5:ad:0b:f1:2d:1d:57:4f:5c:a9:a8:56:33:dc:3b:6f:c0:f6:
f0:ce:a0:19:07:24:8e:b3:d8:8e:42:9e:0c:56:56:71:af:2d:
6d:9c:36:2e:90:a5:fb:7b:a5:dc:90:63:d8:26:da:3c:5c:5c:
f5:ca:ef:e3:6b:f3:f9:b3:67:7f:51:61:60:20:c8:42:7a:61:
d0:d4:1e:0e:73:01:6f:b2:1a:cc:f7:e5:3a:b1:43:9d:4e:6c:
03:c8:6e:7b:63:e1:d9:97:57:f0:06:a0:c8:34:6c:e7:e7:f5:
0a:ef:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:30 2025 by rpki-client