Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
File: zf9bPNry6tG8MwlBG_lJLNmHr7o.mft (raw, json)
Hash identifier: sy7nYnB6/OSyStaOQjcRFWBUBwXhHrAhQcASjgcYEks=
Subject key identifier: C5:12:6E:69:2F:1D:6E:2D:84:E9:3A:3D:B7:98:66:65:4D:BE:9F:33
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial: 0197B7EA5F1B9A2BE45CB86895499D126579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa (hash: 4LCjfvPAnVknZ+aHhkSXzNTjWeSMT085uGaEj2C566Q=)
2: zf9bPNry6tG8MwlBG_lJLNmHr7o.crl (hash: w8Fc7nttqwHyemxXkAO/wuS+eGq7QlZdVomitQ5p5g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5f:1b:9a:2b:e4:5c:b8:68:95:49:9d:12:65:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=c5126e692f1d6e2d84e93a3db79866654dbe9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:07:e8:d5:de:c5:f7:b7:23:57:99:79:d7:
c0:2c:6c:b1:04:24:52:7e:e6:88:e8:09:3f:f6:fb:
6b:3c:60:aa:e1:82:a7:3a:e5:27:68:83:7f:77:72:
6f:37:09:e8:ac:a7:a7:c1:16:f5:e5:5e:77:2a:b9:
98:35:fa:28:ed:a2:c0:6c:83:d6:46:d6:e7:30:4e:
63:f3:a6:88:ef:08:2d:de:6a:43:56:22:5e:62:3b:
d8:59:be:08:61:69:68:3e:cc:d4:b9:38:79:4b:ae:
bb:ee:a2:dd:2d:ad:ea:d4:e0:d2:a9:69:87:19:d0:
71:69:d3:2b:75:3d:96:a9:f1:d9:05:49:e5:e3:66:
32:c3:0b:e1:7a:72:34:b3:75:c0:f7:d0:f0:b6:1c:
49:fc:e4:64:95:25:c5:a9:a8:a6:7f:0b:94:46:f9:
f4:5a:34:b3:61:70:e4:98:bd:57:5d:fa:0e:90:1e:
e8:b3:16:8e:5d:34:f0:98:5c:cb:b9:2f:46:ed:6d:
16:b2:97:5c:ad:24:80:2d:8e:8e:7e:f2:29:09:00:
3a:7d:f2:aa:e9:63:8e:7a:16:3d:8e:d1:e1:9e:08:
dd:ee:36:6a:4f:6f:52:e9:6b:a0:34:eb:66:3e:c2:
4f:5b:23:c1:62:d6:90:fd:3c:ef:c2:99:96:63:fd:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:12:6E:69:2F:1D:6E:2D:84:E9:3A:3D:B7:98:66:65:4D:BE:9F:33
X509v3 Authority Key Identifier:
keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:67:b0:66:70:47:3d:b3:69:37:27:ea:a3:68:07:aa:f1:dc:
05:c7:c2:55:cd:f0:cf:c2:e7:ae:b5:d5:b7:05:b7:2d:da:95:
12:a5:e7:0f:88:92:97:d3:e4:9c:39:1e:d1:c0:41:62:05:ed:
ba:7e:45:41:a2:58:31:fc:94:a5:ce:2e:bd:67:df:d6:af:90:
bb:1f:60:03:11:79:e7:59:8e:81:64:51:c4:df:85:e9:d3:8c:
17:25:a1:e9:92:f9:dd:21:69:f4:5d:53:6d:2b:17:8b:e9:98:
7b:4a:11:63:8a:29:ea:9a:9f:ef:d5:f1:93:0f:bd:06:32:75:
f7:43:47:00:e6:be:ff:f5:a2:b5:c7:90:e6:36:a8:cc:e7:e9:
02:d3:64:d9:99:30:86:e7:71:48:c5:ae:55:a0:04:9f:78:a1:
20:da:86:c0:0e:fa:be:85:c1:84:06:b3:a0:dc:cf:ed:d3:55:
72:d6:7a:89:9a:4c:c9:bc:05:9b:d3:30:00:86:67:e3:f1:8e:
6b:1a:8f:15:d6:c4:cc:9d:c7:6f:71:34:cd:60:df:86:9f:d8:
88:0d:d7:20:d9:ae:03:ec:ca:f8:6c:9a:e5:8a:54:e4:35:69:
cc:6a:0f:bb:3d:dc:72:c2:a3:21:1f:67:bb:24:5c:79:06:5e:
e4:ba:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:42 2025 by rpki-client