Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: ebe7otn13mZDq/r6WQUD29NSGv5QPZD0opOhhcyOxtQ=
Subject key identifier: C0:5B:F0:53:8C:4A:FC:79:65:87:D0:07:0A:0B:EB:A6:70:6D:DE:E8
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 019921B1BC26933AAC982862865F752D6782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:00 +0000
Manifest this update: Sun 07 Sep 2025 01:02:00 +0000
Manifest next update: Mon 08 Sep 2025 01:02:00 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: 9rZOLxv0nJKFTBaQEPdStnmMpoWXG5tSP0aV1xmkNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:bc:26:93:3a:ac:98:28:62:86:5f:75:2d:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Sep 7 01:02:00 2025 GMT
Not After : Sep 8 01:02:00 2025 GMT
Subject: CN=c05bf0538c4afc796587d0070a0beba6706ddee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:32:94:d7:47:19:aa:c7:df:de:43:83:d0:
02:86:d5:a3:35:b1:cc:cb:60:1e:ea:38:69:01:9b:
a5:cc:53:8f:a3:31:a0:d0:69:06:bf:8e:83:38:44:
06:5c:34:c9:0f:0a:09:2c:ed:e0:47:cf:71:6c:c0:
8d:c2:e0:af:e9:38:dd:b0:88:5f:1e:1d:97:61:f0:
0e:d1:15:a7:f0:75:05:ef:21:aa:f2:3e:83:78:b6:
d2:8f:2e:0a:d8:2a:ce:cf:64:1b:3b:13:50:7c:13:
53:36:59:65:45:aa:b6:b8:ce:3b:bf:10:ca:5b:77:
38:6d:47:bc:0c:54:95:7f:0a:0d:3c:60:d4:de:02:
2c:13:56:28:52:36:08:ec:43:99:91:d3:08:d2:66:
ae:8b:8d:f3:4a:61:d7:c4:2d:2e:1a:2d:dc:04:34:
6a:2b:9f:af:c6:4e:05:30:c5:78:d0:28:27:2a:59:
3e:bf:38:98:62:b4:23:e5:7e:71:09:0e:1e:ef:61:
de:75:08:8e:4b:68:19:3a:93:2b:ea:84:60:63:ff:
ed:42:75:49:b5:3f:d3:22:21:a4:86:0e:ec:2e:0c:
01:27:2d:eb:00:2f:43:a9:49:b2:09:1e:46:51:cf:
f9:fc:ac:97:60:83:c8:52:96:47:fb:79:9e:3a:95:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:F0:53:8C:4A:FC:79:65:87:D0:07:0A:0B:EB:A6:70:6D:DE:E8
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:84:60:98:7a:33:99:3e:f5:b3:dc:e2:a5:29:7c:92:fe:
79:0d:0c:0a:aa:e8:4e:68:ef:6c:50:8c:e9:ec:25:b6:cf:4e:
c7:1f:4b:b2:1d:3c:66:49:aa:ef:f5:fc:8b:d6:9b:82:2f:7e:
50:ad:57:10:38:f1:fc:48:4d:f3:68:a9:2c:15:8d:66:38:5a:
06:97:89:9c:94:92:d1:a8:c4:a0:bc:67:1a:d3:52:a5:5c:a5:
73:41:e6:d0:d6:61:46:ab:71:06:00:6e:03:52:67:b4:ba:4e:
92:b8:ff:c5:ad:a9:63:49:ec:31:5d:32:ce:ba:0c:a7:3c:c3:
55:09:80:56:dd:2a:98:7b:94:15:62:ab:24:32:a7:57:1e:97:
f0:19:13:41:b4:34:df:de:c0:cf:66:50:f3:4a:72:cc:a9:b1:
66:74:7b:36:9d:be:2c:db:55:a3:16:f1:1b:43:86:c2:99:03:
17:b7:21:08:09:00:84:ba:2d:e0:56:80:a3:07:b2:ed:e6:00:
3c:0a:82:3f:4e:e9:77:17:b8:71:7a:09:8f:3a:03:fb:56:7e:
6c:34:fe:07:ab:a8:5a:48:69:2c:a0:96:be:57:7d:87:a0:34:
8f:54:67:70:bc:65:79:9d:07:9d:a6:ef:b1:06:2c:17:c2:ac:
ac:12:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:40 2025 by rpki-client