Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: lBCESBFzVuZNohNHrYhtyyDAo78ZJ8nbHyeTLxfjO30=
Subject key identifier: 7F:0E:5A:42:24:C1:55:A7:9E:A5:22:B5:B6:50:B9:89:8C:D3:10:52
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0197BB58D1AC78EC0FE1D5913553DCC3B6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 102F
Signing time: Sun 29 Jun 2025 11:00:49 +0000
Manifest this update: Sun 29 Jun 2025 11:00:49 +0000
Manifest next update: Mon 30 Jun 2025 11:00:49 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: kVIfgfpYsS1lUDfqV6n9MTsajECpQaTxZykw5vZoRpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:d1:ac:78:ec:0f:e1:d5:91:35:53:dc:c3:b6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jun 29 11:00:49 2025 GMT
Not After : Jun 30 11:00:49 2025 GMT
Subject: CN=7f0e5a4224c155a79ea522b5b650b9898cd31052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:e4:8b:f4:00:bf:80:e3:3c:00:ae:1e:e0:
e6:c1:a1:91:fd:77:e7:a8:7f:de:d3:8a:85:ee:d5:
5b:a4:d8:09:03:da:2f:4d:14:65:b5:04:20:eb:86:
e2:73:96:6d:18:c8:c1:e6:22:6b:bf:0d:67:e1:a4:
3e:81:dc:75:de:2c:3e:f7:49:3a:2d:63:20:e0:63:
2f:de:c1:70:de:cf:e2:21:57:8c:c1:05:d4:97:a6:
2d:69:99:e3:d6:58:bd:28:5e:4e:55:cd:3f:d5:6c:
a4:ec:9a:b7:eb:b2:37:c4:90:ee:84:a0:66:d6:dc:
7e:a6:bf:09:e1:7b:43:b0:b2:5d:c2:88:44:c6:23:
73:af:dd:04:ec:0c:14:27:a8:b3:02:d4:32:2f:d6:
7d:b0:07:89:ef:ea:c6:21:fb:55:7d:a2:09:10:b2:
3c:09:1d:c3:c1:2d:06:f8:1d:ee:fa:39:86:3d:77:
7b:e6:ba:04:0c:df:d2:6d:5e:41:92:6a:01:5b:83:
4b:2f:1a:fb:c8:63:a6:6b:b5:9c:37:a5:e7:ad:70:
35:b0:d8:71:d9:25:2d:8d:c5:c6:79:40:a4:93:f4:
22:5c:59:35:f3:75:dd:29:e4:41:fc:e4:11:10:07:
2e:b5:69:4d:18:c3:40:db:75:6a:47:ca:cd:f4:ef:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:5A:42:24:C1:55:A7:9E:A5:22:B5:B6:50:B9:89:8C:D3:10:52
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:2b:7a:64:93:ea:fa:51:58:3e:13:c9:06:11:ad:b2:64:
31:21:19:17:6d:17:2f:6c:b7:64:6c:12:40:39:ab:04:b9:b3:
6b:ed:b2:2a:63:98:08:9f:d3:ab:a3:76:23:f2:3b:5b:6e:86:
a7:94:56:32:26:11:79:02:6f:6d:98:bb:8b:47:b9:c5:13:9d:
f7:83:c0:83:c2:60:e3:e7:05:aa:d4:fd:24:4f:20:19:e3:09:
34:f7:85:f2:b1:0b:25:cf:9b:d1:f8:b2:d6:6c:4c:30:9f:89:
d2:87:3b:b7:38:7a:d6:3f:9c:64:8b:7e:cb:53:32:d4:f4:4c:
9b:33:c7:08:f8:82:e0:6a:d5:c9:fc:a8:8f:61:be:df:76:f9:
5e:6f:50:36:13:b3:91:8c:b2:0d:fe:1c:fc:79:3b:13:e9:ff:
3e:35:19:40:d8:66:83:16:fb:be:6c:6c:5d:0a:4e:04:8f:69:
15:de:8d:35:ee:89:58:91:3a:32:38:ee:8a:3f:a2:05:0c:e1:
0e:1e:d0:08:de:0c:6b:0b:c5:59:a1:81:be:be:65:7f:2b:33:
ae:4f:1e:60:00:6d:44:3f:c9:84:70:bb:45:2d:cd:40:d5:cc:
27:c0:b8:4c:96:73:43:92:da:6e:24:9b:6f:00:7c:22:c5:3a:
33:10:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:29 2025 by rpki-client