Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: 7vgNSI1LBKGb5+L4Zgp/cxDfXaFcDz2rOkLcxz/ftEs=
Subject key identifier: 77:DB:6E:05:5D:50:71:B2:2A:C5:44:CB:62:08:C5:83:71:05:94:86
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019932365BBD9C90BB30DF5D786F5F58F1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 06:00:47 +0000
Manifest this update: Wed 10 Sep 2025 06:00:47 +0000
Manifest next update: Thu 11 Sep 2025 06:00:47 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: 7w5MKvJ8lb5seXFk81Rx+nrPukk+Ad+6gjiMVs2YRKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:5b:bd:9c:90:bb:30:df:5d:78:6f:5f:58:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Sep 10 06:00:47 2025 GMT
Not After : Sep 11 06:00:47 2025 GMT
Subject: CN=77db6e055d5071b22ac544cb6208c58371059486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:9b:7a:06:43:ee:b6:2d:23:72:cb:a7:5e:
33:28:7e:d3:97:9b:c2:be:fc:bb:97:bf:54:40:f3:
57:17:e6:2e:09:dd:a4:ac:59:4f:8c:65:fd:a7:87:
4e:7f:3b:45:fd:5d:7e:99:ff:9d:b8:5e:a1:15:7f:
e2:8c:65:9b:ac:f6:39:b5:bb:b7:58:47:38:36:65:
97:87:d8:5e:d4:a9:d9:c7:8c:1a:c6:b6:ac:bb:e8:
16:77:bf:c4:50:eb:ae:5f:53:fc:b4:0f:01:73:88:
a3:40:fe:0b:56:13:04:3e:71:97:91:83:5f:7d:3e:
0a:30:77:63:94:4c:eb:16:90:48:69:10:35:55:da:
86:6a:b8:ba:18:0d:b7:b8:83:92:78:82:b6:58:6d:
8b:0b:97:08:c2:ce:0d:a7:15:da:8c:e7:cb:a3:be:
ec:15:3d:ba:49:26:af:fb:12:36:1d:c3:ad:25:bb:
d5:5d:58:d9:bc:29:d1:36:6a:24:af:a0:92:af:f8:
19:d7:b5:30:57:17:75:e4:6e:3b:fc:dd:7e:df:37:
eb:32:42:84:9d:b9:55:17:3d:a2:74:7a:82:42:79:
62:df:a9:10:64:e2:a6:79:eb:8f:da:8f:33:57:81:
c0:05:b0:b2:41:21:b0:34:5b:ba:94:24:1f:23:f0:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DB:6E:05:5D:50:71:B2:2A:C5:44:CB:62:08:C5:83:71:05:94:86
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:51:f2:c2:98:0d:fe:0a:c2:eb:37:bd:77:a1:62:91:82:1d:
bd:ce:ad:46:23:e0:a9:41:db:1a:f7:10:1a:24:c1:5e:71:e8:
c8:e6:bb:a6:87:3a:27:8f:7c:c5:18:4c:18:7e:97:5d:b9:67:
f9:c2:b4:5f:38:30:a0:5a:38:6a:de:cc:b0:e9:af:f2:45:0b:
97:23:3a:59:cb:d5:66:a1:57:76:34:12:a5:4b:7d:60:16:41:
02:c9:44:9a:96:7c:3b:2a:03:69:e6:2a:85:a0:c1:57:cb:b2:
c5:96:7c:f4:85:47:f6:31:9c:85:ae:09:42:9f:8b:b4:bc:25:
41:9c:0d:7c:30:02:f4:7b:d7:9e:e8:21:ff:c5:d1:ea:c5:a1:
60:f8:db:5d:b6:c0:1d:a9:8e:d3:3c:00:93:17:33:32:18:ef:
f9:42:fd:c2:54:3a:b0:fa:7e:30:68:12:b9:83:1e:60:04:46:
40:a2:e7:f3:b6:cc:c0:17:c7:b6:ff:82:26:82:25:57:52:3f:
aa:e4:10:a5:61:d4:8e:6f:cd:46:a1:5f:cf:c6:f1:8b:19:40:
db:a3:3b:5a:77:51:cd:2a:d6:d7:0b:41:b5:2c:85:c5:07:57:
0e:d5:7e:07:29:6d:7e:9a:46:6a:ed:6c:85:1e:42:7c:a9:b4:
02:03:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:53:34 2025 by rpki-client