Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File: zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier: EHDCG9yYXlVjJG7cA/0gdJOuFDCESToEBHID8HLSYoQ=
Subject key identifier: D2:0A:B1:41:5F:08:05:5E:D3:A1:5B:5D:1B:05:C6:6C:5C:A4:85:03
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 0199304817A4699E50F7A8C38F2CE9AA3B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number: 1680
Signing time: Tue 09 Sep 2025 21:00:54 +0000
Manifest this update: Tue 09 Sep 2025 21:00:54 +0000
Manifest next update: Wed 10 Sep 2025 21:00:54 +0000
Files and hashes: 1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=)
2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=)
3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=)
4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=)
5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=)
6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=)
7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: cMblSmk6ndJSPW53kEuvVd0GDsnb+yqLYSWe16XghOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:48:17:a4:69:9e:50:f7:a8:c3:8f:2c:e9:aa:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Sep 9 21:00:54 2025 GMT
Not After : Sep 10 21:00:54 2025 GMT
Subject: CN=d20ab1415f08055ed3a15b5d1b05c66c5ca48503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:13:58:d2:af:e4:d0:f7:9f:96:7c:16:84:
cf:1d:0d:e1:97:0f:32:26:ed:89:16:84:02:85:76:
28:e9:e4:c1:f9:94:dc:00:3a:f7:4d:10:32:b5:3f:
6d:32:29:b8:eb:3d:76:60:45:e6:00:86:85:ff:3d:
7b:f7:be:20:1b:74:22:33:f1:46:0e:09:13:e0:34:
1c:38:36:55:31:aa:6b:31:59:ca:1a:58:c3:77:9c:
7c:d8:0b:70:d0:63:30:79:e4:f9:d4:c8:08:31:a0:
09:7b:5e:00:46:ce:fc:fa:7b:e3:0c:55:44:fa:77:
5d:83:3a:6d:c8:c4:fa:53:37:73:08:a5:3d:ab:35:
7f:ab:4b:25:64:ba:fc:1c:f3:42:af:cf:e8:38:21:
24:a3:71:c7:97:5c:b5:3c:45:07:99:5c:8e:69:40:
02:60:89:16:c7:b0:79:a3:af:93:5d:9d:80:92:b7:
b3:3a:90:27:11:ea:b2:44:c4:a5:94:ec:d3:d5:bb:
ce:a3:d2:34:0e:0f:25:1b:ad:a5:54:3a:70:9d:91:
1f:49:7c:f1:6b:5e:a8:d0:95:0b:ba:96:de:34:b2:
e4:c1:9e:7b:82:57:b2:1e:06:ec:13:e4:f7:87:f1:
c8:83:bd:cc:fe:c5:ec:4d:00:1a:c2:f9:e5:4b:7d:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:B1:41:5F:08:05:5E:D3:A1:5B:5D:1B:05:C6:6C:5C:A4:85:03
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0b:99:9b:a6:57:c9:bc:ff:ac:96:d8:6e:76:3c:71:67:33:
48:31:7f:e6:7f:b1:99:28:8a:45:b9:d7:af:98:b6:c7:b2:ee:
aa:13:cd:60:88:b9:06:96:15:b0:60:08:0e:39:dd:01:c0:dd:
c3:9e:8f:ef:e1:fa:1c:f9:10:cd:21:2e:98:bd:29:2a:3e:85:
c6:01:ca:7d:7c:de:e4:f4:67:4d:61:cf:ed:80:90:4f:a2:7f:
92:df:07:83:c7:ba:2c:d2:e9:b5:e2:3f:70:a7:88:dc:24:3e:
90:c6:0e:83:90:97:73:ab:31:06:2e:31:d1:af:23:b0:22:47:
3e:08:ee:08:27:fa:e7:d4:15:dc:cc:d2:46:89:4d:65:78:7b:
b1:89:4c:e2:0c:dc:4f:70:49:27:b4:bc:11:f6:30:03:e1:d8:
f3:89:83:b8:da:1e:ea:3a:3d:94:4d:78:67:7b:01:63:2c:a0:
43:e4:f8:fe:88:6f:89:83:df:27:e8:cb:c7:2c:c0:8e:b7:9f:
91:33:9e:5a:62:ef:a1:92:9d:8e:39:59:05:46:9b:28:a0:87:
2c:d8:08:d5:89:69:02:b2:dc:f1:20:41:3d:65:3a:64:05:ab:
cd:19:28:3d:9a:9e:f1:84:24:e8:03:41:aa:35:18:b6:d5:3a:
16:6f:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:55:02 2025 by rpki-client