Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: SZM/aaQlz0vw7pQB0R56UHFxwRYNiwvcTaJouu65oE0=
Subject key identifier: 86:0B:17:92:BA:2E:FA:94:4B:1F:9F:EA:FC:83:D0:B0:13:61:0C:87
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0198C724A56357EBF370D8F9486CF8CAF3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0BF0
Signing time: Wed 20 Aug 2025 11:02:04 +0000
Manifest this update: Wed 20 Aug 2025 11:02:04 +0000
Manifest next update: Thu 21 Aug 2025 11:02:04 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: dhwX8cCotW9Jdumpt2sVGGxcW/o5cc873sUg6ybob+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:a5:63:57:eb:f3:70:d8:f9:48:6c:f8:ca:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Aug 20 11:02:04 2025 GMT
Not After : Aug 21 11:02:04 2025 GMT
Subject: CN=860b1792ba2efa944b1f9feafc83d0b013610c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:43:30:74:17:e9:ec:dd:ba:8e:12:05:bf:
cf:26:b3:60:9f:6c:20:2c:3d:f2:30:5e:a0:18:f4:
5a:2b:1b:07:3f:39:c1:0b:f6:28:1f:28:20:5d:71:
87:e9:3b:83:57:99:b1:f3:6c:e4:83:c5:92:a7:30:
72:2c:16:41:d0:d4:3b:4f:ea:e7:ed:93:d8:94:dc:
f7:23:01:f2:6f:fb:a8:9e:38:41:36:bf:ed:1c:e1:
15:c4:b1:ef:b5:fc:d3:ab:ae:0b:e3:a2:dc:e5:26:
77:a4:a6:63:38:02:02:82:18:03:3b:11:cc:28:84:
58:9f:01:c5:29:68:91:3d:67:eb:0d:0c:79:84:c9:
96:f7:c0:5c:6c:b4:e4:08:e7:f0:1c:b2:6a:ef:fb:
21:02:f3:44:70:d3:9d:a6:73:ba:34:4a:fc:8e:85:
26:f5:7b:8a:77:12:72:d6:25:53:9c:cd:10:87:93:
a3:3c:33:a4:41:ee:12:ca:73:1b:8b:14:0f:6b:9c:
d3:97:19:ec:e7:ef:98:6c:b5:0a:b9:4e:58:66:a8:
dd:9b:7a:33:df:dd:13:b0:22:4e:0a:08:bd:26:4e:
3c:34:a6:48:06:3e:4f:22:7c:f8:36:db:f0:7b:69:
20:01:b8:ae:9b:e5:bb:a5:f9:45:93:54:c6:e8:7c:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0B:17:92:BA:2E:FA:94:4B:1F:9F:EA:FC:83:D0:B0:13:61:0C:87
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:1d:c7:6d:45:aa:16:26:01:ae:fa:31:b1:39:92:e6:2e:
d2:72:f5:36:b6:05:87:4c:ba:54:09:34:86:6a:62:55:3b:68:
45:91:ef:96:14:1d:a2:85:72:23:04:f4:84:07:50:90:18:b2:
47:90:ed:b0:bb:16:94:d3:5f:48:bd:6d:aa:25:b1:4d:88:da:
c5:b6:92:08:c5:b7:53:79:2d:dd:78:d9:a2:e1:ac:46:12:4a:
ea:45:4c:83:64:ed:2e:e8:45:31:94:2e:0c:7e:35:41:a8:bd:
24:0d:f9:68:df:41:2e:02:ad:f3:53:f6:b6:35:52:e6:9a:f3:
8b:9b:69:78:57:e1:89:b0:2b:bd:aa:0f:c6:c2:6e:2f:36:f7:
a0:1d:c7:ca:b2:38:1e:e3:90:74:02:3f:0f:81:24:a8:9d:b9:
5d:03:c8:55:2b:b4:0c:b2:ef:87:1d:22:2e:63:9f:ad:23:a6:
4f:97:08:9f:11:1d:67:e0:ae:24:83:e1:43:8c:85:b0:ad:84:
aa:9e:b9:a5:b6:56:b5:95:e0:86:6f:dc:c7:34:bd:4f:93:7f:
2e:6d:a1:c8:ea:3f:f7:2a:0d:f9:b3:20:49:3d:3c:71:f9:e2:
d8:72:4e:10:8e:07:7b:d7:db:03:3e:b0:94:9f:8f:af:0f:28:
c2:cf:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:51:50 2025 by rpki-client