Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: MeAr98bp3JFRsyifrIlXVA9bCVERlpnArtaprBKBLx4=
Subject key identifier: D6:61:87:9F:55:95:0C:DA:F6:05:6E:38:C6:6D:09:BA:C8:01:25:2F
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 0197B88ED91CC1D890D45917FDA17010424E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:00:58 +0000
Manifest this update: Sat 28 Jun 2025 22:00:58 +0000
Manifest next update: Sun 29 Jun 2025 22:00:58 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: cvvHOrY1vKXFjkR3G8hAaarOuwEkJaUSn8dCD/taLzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d9:1c:c1:d8:90:d4:59:17:fd:a1:70:10:42:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jun 28 22:00:58 2025 GMT
Not After : Jun 29 22:00:58 2025 GMT
Subject: CN=d661879f55950cdaf6056e38c66d09bac801252f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:c1:3a:76:bb:57:c5:e5:cf:73:fd:ef:b9:
84:b4:ba:f2:c4:f1:95:9e:d1:67:0e:35:4c:76:a9:
4d:17:ed:3e:3d:ae:ef:9b:76:88:03:08:03:89:e8:
5d:b0:fe:e2:05:91:79:f6:7f:1e:49:2d:f4:e8:27:
ad:42:88:2a:8a:29:7a:a7:d4:ee:76:fb:4a:6c:92:
bc:e7:26:8c:95:37:7a:4c:db:04:a5:7a:70:53:fc:
52:9b:3f:45:98:81:90:24:80:07:8c:c5:d0:cc:12:
2c:5a:0b:04:a3:ab:99:58:4c:3f:e1:07:f3:d7:46:
7d:c3:57:2f:e4:1e:7c:39:df:cc:76:39:95:cc:bb:
94:d0:a0:76:2d:bd:87:d0:c7:c8:bb:04:8f:15:3e:
47:fd:be:02:1c:77:a5:9b:f8:12:8d:da:f0:e0:92:
90:5c:35:b9:9b:3c:0e:85:3e:31:70:31:68:03:53:
85:26:19:a1:1b:1d:fa:40:02:05:07:ed:09:ca:11:
76:39:c3:b3:a4:76:41:6b:90:9c:c0:3b:03:ee:63:
89:25:e9:39:49:b6:02:39:8a:43:8a:59:66:5f:c3:
89:23:52:1e:a4:12:cf:ec:0e:31:50:19:1b:54:9e:
96:1e:ad:aa:7c:7e:4e:75:6f:cd:8a:63:21:b9:a3:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:87:9F:55:95:0C:DA:F6:05:6E:38:C6:6D:09:BA:C8:01:25:2F
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:03:f9:6d:e1:17:4e:6e:20:fc:3d:89:8d:f2:4e:db:06:
d6:54:c2:f2:ae:1f:87:11:0a:ff:2e:08:36:da:22:ab:85:f7:
7c:4e:e1:c8:13:58:ff:ea:e0:20:75:68:c4:ca:fe:6a:59:ed:
50:dc:3b:dc:5f:0b:c2:07:24:7b:6d:3c:4e:55:a8:84:84:e3:
3c:b7:30:d2:02:a8:f6:e1:a9:61:3e:99:12:47:bd:54:ef:f5:
33:6d:0f:38:2d:19:cb:2e:08:6b:90:9d:10:62:83:3c:c8:39:
45:65:1d:1d:da:30:c4:77:57:6c:94:70:2f:00:3d:90:86:fc:
62:99:86:4e:68:4e:dd:1c:39:82:df:91:6b:fb:c5:c0:b8:2d:
13:8d:4e:78:b1:c8:06:0f:fd:b6:72:40:b8:29:94:b0:66:7d:
4b:fe:c3:10:13:c4:a0:d0:0e:d7:18:8f:b6:2f:89:c3:cc:52:
8b:6f:24:aa:42:e8:47:37:93:cc:c8:65:42:78:82:4b:e9:17:
ed:bf:e0:56:37:98:f3:59:9c:36:5d:f2:9f:e4:72:a6:c8:33:
b7:cd:e7:48:4f:3c:65:5d:af:30:a0:91:f3:f0:ae:ee:bd:8a:
b2:e3:d2:1c:46:7d:b6:c5:24:a0:0d:0f:4c:50:53:17:4f:9a:
07:06:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:44 2025 by rpki-client