Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: C/s7bRNKhDlndyfgBwHbbxRCWM3V/xY6jOO++Us/bLU=
Subject key identifier: 7F:1F:CD:FC:3B:C4:66:79:FC:78:F5:17:6F:2E:25:0B:13:16:E5:A9
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 01992443C9B265FA23C34E0D79F52D25EDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 13:00:45 +0000
Manifest this update: Sun 07 Sep 2025 13:00:45 +0000
Manifest next update: Mon 08 Sep 2025 13:00:45 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: Y63GHduWootBr0ZsBkF8My/sct2dYDZT171GPBIRHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:c9:b2:65:fa:23:c3:4e:0d:79:f5:2d:25:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Sep 7 13:00:45 2025 GMT
Not After : Sep 8 13:00:45 2025 GMT
Subject: CN=7f1fcdfc3bc46679fc78f5176f2e250b1316e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:b6:0d:df:29:34:ce:1c:e2:23:8e:e3:5a:
7a:59:8e:01:f5:ed:d2:0a:61:a5:be:8f:db:54:74:
02:09:3c:49:1d:0a:b9:ad:44:d2:2c:8b:b0:92:af:
57:d2:ce:fc:09:1b:46:75:1f:89:67:96:a2:d4:44:
15:84:78:d7:fb:04:97:ca:50:c5:3c:aa:6a:57:c6:
c1:8a:10:4f:a7:af:40:85:0a:23:46:74:03:0e:96:
3a:ce:23:08:d9:85:82:81:9d:32:cc:0d:ad:45:53:
50:2e:ac:21:1c:0d:35:d6:44:01:4b:23:5f:0a:ee:
6f:1f:a0:dd:f4:3c:26:c3:93:10:2c:f1:c5:62:b6:
4a:cf:8f:87:e2:48:64:ac:34:54:1f:53:41:db:2b:
2d:c3:07:18:53:71:62:dc:c7:50:6c:bb:50:4a:85:
fb:74:d6:59:48:8a:03:29:64:29:1c:11:fb:14:4a:
a4:92:7f:a9:73:8c:5c:58:00:ec:3c:26:2a:d5:f6:
ca:e8:65:24:7b:03:28:a8:5d:05:c1:17:6d:d7:dd:
56:39:36:4b:bb:61:51:87:8f:04:39:4b:6a:10:83:
ec:40:ba:2c:28:82:fd:30:19:eb:96:e9:71:eb:8a:
60:b6:56:69:68:b0:0a:f9:74:77:82:43:ad:cf:1d:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:CD:FC:3B:C4:66:79:FC:78:F5:17:6F:2E:25:0B:13:16:E5:A9
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:72:ac:39:ce:0d:58:00:ef:d7:e3:e3:b0:1a:00:82:b4:73:
fe:de:c9:9f:2e:ee:63:b9:42:fd:54:89:52:3a:52:d3:8b:83:
c7:f5:41:cd:7a:27:3e:af:ee:a1:74:85:9a:5d:6b:b8:1a:88:
b9:c5:a4:cf:46:93:32:5f:30:e3:40:5a:a7:4b:de:f7:a7:95:
2e:66:d7:67:7f:c2:24:2f:bf:d7:00:7d:b5:ed:54:2f:c4:3d:
b8:75:8e:be:e9:4b:2c:2e:80:5b:0c:77:64:7b:f7:10:30:c2:
55:98:60:9a:33:27:d7:9d:7c:df:d7:91:d3:32:43:24:46:65:
7b:6c:36:a8:9a:d2:d4:b8:0e:08:3d:b2:01:f4:85:83:5e:94:
1a:9f:79:4b:5d:02:4c:13:59:b5:9d:df:74:39:9c:09:b2:bc:
c1:fe:eb:9a:68:65:8f:25:51:44:7b:0a:a1:44:88:da:72:65:
1f:2c:7a:1f:44:11:bc:d6:c2:c8:4c:c5:43:1f:4e:a5:e7:10:
64:43:67:81:84:0d:f3:9f:0a:d8:a4:ee:5c:c0:1f:1d:a7:dc:
67:61:28:83:52:d1:b4:21:d1:9a:fe:47:d7:10:80:24:d4:d9:
ac:69:01:88:b6:39:07:21:dd:7d:8a:6d:b2:43:cf:89:35:3b:
49:9a:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:40 2025 by rpki-client