Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: QObmRvH3tTvnnr+9OoB/uzgFAnC1ltmFM1NzPiy8tkw=
Subject key identifier: 7B:BD:B1:8E:A2:46:21:91:5B:AF:A0:A4:87:52:B2:3B:E2:1D:79:FB
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019922FA8EE8CC5D935163AE9FCE24268E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: hmlu84jv9vTVN/CabEOduYlyHrdy91nndW4CNpDolFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8e:e8:cc:5d:93:51:63:ae:9f:ce:24:26:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=7bbdb18ea24621915bafa0a48752b23be21d79fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:8e:6a:3a:55:9a:84:51:74:5f:ed:91:3a:
fc:fd:83:37:28:97:8e:64:8d:83:89:5c:38:9f:7d:
aa:fa:84:19:7a:0d:ae:b4:fc:2e:c9:e6:80:f7:f6:
2d:4d:73:f5:d7:1c:e2:0d:b5:d6:3b:c2:53:e6:50:
47:41:a6:a5:73:d3:30:e9:5d:b0:92:af:47:15:5f:
74:9c:a6:c7:7e:7a:3b:51:03:97:91:26:53:59:bf:
64:da:86:da:4c:88:f7:1c:83:f0:bf:1c:56:1f:3e:
1d:6f:d5:dc:3c:b2:e7:bb:29:cd:29:79:7f:9e:6f:
07:51:16:54:b2:56:92:be:66:f6:24:dd:21:1f:05:
70:5c:b2:40:23:50:e7:9f:96:37:5d:c4:b3:57:8b:
85:8f:5b:59:61:b8:b5:14:1b:03:f9:05:ac:89:93:
9b:3e:1d:e5:20:57:1a:81:c9:19:4d:61:57:42:09:
dc:c3:4e:d7:9b:4f:e5:33:08:4d:84:db:2a:b0:6e:
ac:0f:29:33:67:10:cb:9b:39:ee:dc:d8:bc:67:90:
9c:34:95:a9:d5:fc:27:bf:28:31:bc:44:64:d9:79:
7d:db:bb:8a:93:9e:2a:a4:16:5b:78:ac:36:bc:4e:
e2:7a:59:88:53:f9:38:26:e5:fc:32:50:02:14:02:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:B1:8E:A2:46:21:91:5B:AF:A0:A4:87:52:B2:3B:E2:1D:79:FB
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:be:89:ee:a3:5b:a3:bf:3b:90:3d:0d:3f:f2:c3:6e:23:be:
21:20:a9:76:6f:9b:d5:e7:cc:02:7f:30:96:7f:9c:1b:d2:4f:
67:35:b9:14:9c:20:cc:c0:df:fe:35:91:cd:69:92:85:08:a5:
75:13:6b:78:ff:c8:ee:b4:46:b9:5f:d2:2d:29:c8:5f:3f:c3:
5d:a6:1a:62:52:a2:14:64:16:d4:b4:eb:47:5c:7d:7c:10:80:
7a:f1:b3:9f:2f:5f:0a:35:d8:a5:4c:e5:0d:9c:a7:83:a2:d1:
6f:05:bb:2b:2f:f0:23:1a:21:64:18:b8:5f:07:b3:c5:47:c5:
c4:a6:19:bb:7d:64:10:04:b9:f8:32:f2:11:62:2b:b3:6f:c7:
93:f9:b6:8a:f0:bb:b8:2c:d7:92:27:db:65:7d:f4:21:36:2e:
f3:f6:ae:bf:07:c4:36:15:6d:bc:50:45:69:32:28:87:e9:44:
41:57:dd:a5:bf:38:9e:28:81:b1:69:a0:5a:ac:be:cd:dd:c6:
71:78:5a:af:c6:84:90:b5:6d:63:67:4e:2f:c2:af:73:16:9a:
8b:a0:ba:3b:5c:8e:b7:a6:d0:4c:13:68:8d:9f:a1:2f:6e:1e:
e4:9f:e9:66:f8:59:cc:d4:88:39:80:fd:ef:48:aa:dd:3a:93:
46:37:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:28 2025 by rpki-client