Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: lr8/w4NhAoaZzBZFUmUPzeVM0MMs4HgG97JEAy/MCNg=
Subject key identifier: FA:EB:E5:5F:E9:54:E5:CD:F3:F3:F7:16:D7:A7:02:9F:D9:4C:C5:2D
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019938DE42AB5B55E0E04DBAC3C1DE547293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 13:01:53 +0000
Manifest this update: Thu 11 Sep 2025 13:01:53 +0000
Manifest next update: Fri 12 Sep 2025 13:01:53 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: maYyK48AvHkDA6YFrtGJjA/gWCpZgpX6kJVB6ChvUlM=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:42:ab:5b:55:e0:e0:4d:ba:c3:c1:de:54:72:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Sep 11 13:01:53 2025 GMT
Not After : Sep 12 13:01:53 2025 GMT
Subject: CN=faebe55fe954e5cdf3f3f716d7a7029fd94cc52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:23:79:44:ba:3a:7f:d3:d1:0e:a4:6c:6a:
f9:13:11:47:25:1d:fb:1c:73:2f:38:7e:8c:f2:cb:
75:e3:f0:36:ea:7c:e6:11:74:59:12:a0:7f:1c:95:
21:9c:4d:9c:bc:d4:75:95:da:54:66:29:ac:34:c2:
d9:25:91:26:e3:23:58:18:be:5e:f3:fc:37:d2:b3:
dd:ff:88:88:97:d7:e7:f0:95:77:00:8e:96:be:31:
63:d4:21:ff:db:2f:bc:43:3f:2e:fd:e1:c2:c7:7b:
0d:ed:cd:13:9e:e0:cf:4e:93:0b:67:f2:09:0f:93:
8b:48:d2:ce:94:f7:82:7a:71:65:84:e2:ad:b0:b2:
04:7b:eb:59:21:b6:9c:2e:10:b7:56:41:4d:45:35:
ba:f0:07:d5:e3:88:9d:53:7f:77:4c:6e:bd:cb:61:
7e:88:57:97:2b:68:a9:92:3c:25:94:6d:c2:8e:ad:
73:31:37:82:fa:30:9f:e2:ef:66:b3:b4:35:9f:53:
81:e2:7f:b9:d8:1f:af:93:71:5c:e0:32:7a:b2:d2:
b5:97:90:44:8f:59:76:67:39:dc:ab:19:da:bf:a1:
52:6a:f2:4b:a2:6c:e7:61:11:5b:c4:f7:13:9f:2d:
5d:bb:ee:ea:6a:e2:2e:0c:9e:ae:aa:e7:e9:df:4d:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:E5:5F:E9:54:E5:CD:F3:F3:F7:16:D7:A7:02:9F:D9:4C:C5:2D
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:eb:4b:0f:39:be:4b:46:3e:25:84:b5:f3:71:c0:04:2f:
0c:06:37:8f:81:b7:91:91:6b:5b:3a:37:21:4b:ef:f7:00:28:
c5:83:c5:ed:53:16:ba:bf:a2:5e:46:47:a5:25:4d:bc:6f:1e:
15:a9:e9:ed:92:08:09:2b:bd:ee:b1:1b:2c:af:97:d7:0d:cd:
f2:00:22:82:3b:30:41:7c:aa:75:13:0d:fd:e9:cd:f3:3b:f8:
be:d6:82:0c:96:ba:59:eb:f9:53:01:28:50:7a:b7:05:b6:08:
47:15:0e:cc:c5:1b:a3:c4:25:9c:2e:8c:0d:a7:2c:b2:18:da:
02:b5:98:95:3f:91:7b:33:88:1b:09:1a:7c:e4:bb:f7:b8:52:
50:d4:02:ac:96:9b:01:54:8d:a5:50:ad:1d:13:fd:77:f4:38:
65:78:86:dd:25:a6:72:fa:9a:55:db:65:c7:c0:8e:77:02:df:
74:a2:e6:d2:bf:72:3c:50:4b:79:42:ed:9d:0d:34:2b:4d:59:
83:71:3a:df:3d:e4:d8:3f:40:26:66:ae:26:d1:af:a3:20:c7:
de:e2:02:e1:5b:ae:00:81:53:f2:c4:6b:ac:d2:b8:74:d4:13:
49:c6:e5:71:5b:85:f9:0c:8f:4e:92:99:53:12:00:e2:f0:95:
b9:e5:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:28:37 2025 by rpki-client