Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: msYh7MlmbY/qFyQQa/mYBqU+6t88KjOSDw4vXek9oj0=
Subject key identifier: 2E:39:77:65:5A:B6:DA:D9:7D:62:56:76:C5:B9:A3:5B:46:84:D8:AA
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 0199228C7478D610483AB19AA9E5E960FEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 0510
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: 7p2zZmZ2bxGe3FKokT5sKbe4lK0ln233fIv2a1GDrxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:74:78:d6:10:48:3a:b1:9a:a9:e5:e9:60:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=2e3977655ab6dad97d625676c5b9a35b4684d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:4f:cb:40:97:f8:8f:37:1b:09:25:4f:31:
37:74:6c:4c:49:3f:2a:6a:ab:4d:75:73:bc:ef:dc:
53:2a:d0:1f:8a:6b:f9:06:3c:60:69:7d:cd:31:ae:
1a:3d:83:0a:6e:ab:03:1a:aa:ec:d0:71:39:cb:bf:
23:37:3c:8c:43:9a:bc:14:8b:b5:95:c9:8f:b3:0a:
ab:64:62:54:bd:c0:f2:57:1a:af:bc:da:0a:ba:b6:
49:03:a0:d5:46:cb:c6:7c:0e:12:df:35:40:e1:d0:
24:fe:9c:b7:f2:50:32:4e:b5:72:1d:81:12:96:74:
60:53:a8:85:91:a4:f7:e0:8f:42:0d:99:f8:99:44:
7c:5c:8f:5c:cb:b4:7f:4a:7a:5c:53:9f:06:3c:19:
b9:23:c7:09:e1:ee:19:45:d7:9b:c0:06:ae:e5:a0:
06:c8:15:4f:ef:ff:e8:ad:b3:d0:73:fa:0b:d2:3e:
1b:57:44:0b:38:ec:7e:14:a7:9d:42:b6:4e:c7:26:
a0:7b:8f:0d:db:f4:93:68:43:b1:92:c9:8f:63:5b:
ec:d2:f2:34:a4:3c:87:33:3a:c2:a5:ed:c2:25:59:
88:5e:b5:b4:bf:5d:f0:13:70:89:46:51:ff:f3:09:
00:52:0c:6b:51:a7:86:49:ab:93:17:e7:25:27:ac:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:77:65:5A:B6:DA:D9:7D:62:56:76:C5:B9:A3:5B:46:84:D8:AA
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5b:93:34:73:f8:33:dc:cb:b7:31:b9:d6:5c:fa:3d:af:54:
68:d4:9d:9d:64:dc:63:7b:a5:15:db:92:94:e3:df:d9:12:9b:
7b:c3:fc:fd:d3:33:5b:42:1d:b4:11:a8:38:3a:87:74:61:64:
4f:dc:df:c3:ff:4a:fa:e0:2a:95:6e:86:da:85:c2:06:66:ae:
91:11:33:2f:a9:96:0f:c6:f5:5e:47:9f:fa:0e:08:3c:38:4f:
fa:f5:58:27:33:9c:42:bf:b5:a2:3f:79:3b:9e:9d:c8:ef:f0:
d6:88:5f:cb:16:0c:3f:f2:d8:24:49:2a:89:51:be:06:7d:8a:
15:8f:0b:64:bf:7e:bf:3a:b6:e7:8c:8c:aa:e3:ab:55:1d:53:
bf:16:0a:bf:8a:3c:c5:9d:c2:aa:87:93:4d:91:1e:5b:aa:d0:
7f:61:12:d8:59:72:6f:74:ea:fd:96:28:ab:91:d0:6b:af:c3:
fd:dd:8a:6f:e1:6b:b8:04:27:45:e2:30:b6:3c:a3:63:ea:c6:
4e:d2:c3:bb:c2:82:72:e4:2d:32:9e:88:78:92:d0:33:ea:48:
26:e0:fb:3d:f7:9d:5d:28:e1:74:1e:c9:3a:7d:3e:58:7c:b5:
61:f2:54:80:6d:6b:37:55:8b:5a:5a:0e:98:4b:c9:d7:24:12:
49:37:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:07 2025 by rpki-client