Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: xTT0gCsmhNmUhoZO9EPbsumuxsFLOfIlCWUvB7e5Nq8=
Subject key identifier: 53:C4:0A:8C:75:CA:C2:75:BE:4D:35:90:1D:BD:0F:C8:1D:80:29:DC
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 0197BB223BB07468D6B3F8E7D8911DE4A738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0416
Signing time: Sun 29 Jun 2025 10:01:12 +0000
Manifest this update: Sun 29 Jun 2025 10:01:12 +0000
Manifest next update: Mon 30 Jun 2025 10:01:12 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: QuUzd5XMdjEbt2pMLrzWNPp02BWTANGSS+f4vJYLtqI=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:3b:b0:74:68:d6:b3:f8:e7:d8:91:1d:e4:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jun 29 10:01:12 2025 GMT
Not After : Jun 30 10:01:12 2025 GMT
Subject: CN=53c40a8c75cac275be4d35901dbd0fc81d8029dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:b7:8e:46:64:fc:13:d8:d2:d7:54:7b:bb:
48:de:d1:2e:41:92:e0:21:05:d8:6c:19:e8:4e:4e:
7d:3f:91:aa:3c:54:bc:a1:1d:be:2f:ba:8e:ea:12:
33:20:94:ed:b6:c7:4c:ff:52:61:fb:3a:4b:82:29:
02:2c:78:19:ef:7c:ae:09:d8:c2:a9:4e:90:87:7e:
3d:ce:16:4e:96:0f:87:11:cf:92:f7:fa:be:82:bc:
e6:f7:1a:6e:3b:1b:66:a2:82:4d:55:27:9c:59:57:
d5:10:af:97:84:43:a0:05:30:86:a5:c3:3c:ba:8b:
f9:63:a7:63:f3:2d:fe:12:84:15:a5:2b:4c:8d:34:
56:70:3e:3e:00:c1:cd:af:ae:f0:26:d2:a5:cd:85:
b1:08:3c:22:bf:6c:14:59:e1:47:9b:52:6e:9e:ea:
ed:e7:a1:f0:5c:b2:c5:0d:33:20:09:aa:8d:6c:da:
b6:7e:4b:29:17:6a:b9:87:fb:97:40:f1:e3:bb:4a:
b4:cd:20:5a:fa:10:f3:79:76:8a:6b:f7:c2:11:c2:
b1:10:db:50:ab:17:a6:08:e9:46:51:d2:ad:c1:cf:
ad:9a:77:14:54:ee:38:e8:c2:33:c2:07:07:4a:9f:
86:54:19:ff:e5:a4:59:f5:98:a6:c4:dd:13:13:38:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:0A:8C:75:CA:C2:75:BE:4D:35:90:1D:BD:0F:C8:1D:80:29:DC
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:95:df:20:0a:2b:ba:c3:f1:af:cf:60:5c:84:0d:49:7e:88:
67:9e:84:ec:c8:80:b5:d4:5a:a4:77:2f:8b:63:d7:a3:ca:0b:
70:f4:b6:e8:9c:e3:a8:38:84:80:4a:a6:c0:6b:ed:0f:35:03:
a6:1d:b5:17:f6:e8:c7:df:9c:23:9d:6e:9c:7b:f8:f7:55:66:
98:3c:42:c5:88:4d:f5:04:90:73:74:56:29:36:fc:8f:4b:33:
c2:05:8d:ed:86:be:3e:ae:4e:ed:cf:ab:66:e6:db:97:e1:aa:
15:52:17:b9:21:fc:df:dd:6f:45:d3:f7:ce:c6:b0:a0:7f:a5:
e7:bd:e6:0f:72:2d:78:26:86:78:05:00:1d:84:34:b5:cf:64:
0d:90:09:88:34:e1:51:5a:da:58:73:28:56:8a:18:92:d3:8a:
f9:ec:4f:cd:12:3a:82:a0:e7:69:d6:68:51:a1:af:a2:9f:4b:
3d:86:92:82:42:50:93:1c:26:75:95:29:9f:58:cf:45:f6:ca:
d4:08:40:56:25:d0:1b:03:e1:a6:c7:a4:59:79:5b:9c:7b:08:
d1:7a:c5:91:7e:fa:af:91:aa:1b:f2:a5:44:40:0a:f4:ed:1c:
47:fb:66:d4:92:2d:46:65:ce:ae:0a:3c:20:1b:5f:2c:c4:01:
8d:e2:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:21:49 2025 by rpki-client