Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: 8QOSxmZYWT/uh5LN4eLRmAojWGmWyQcrUyiEJEJhrAM=
Subject key identifier: 77:9E:CD:18:DB:CF:BF:C3:D0:18:C7:B6:B0:A7:67:8D:35:2B:0E:CE
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0197C15B2D0B5825D3D52213163E83B6A72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 0343
Signing time: Mon 30 Jun 2025 15:01:07 +0000
Manifest this update: Mon 30 Jun 2025 15:01:07 +0000
Manifest next update: Tue 01 Jul 2025 15:01:07 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: 9IcAsHiQeqof+cOrNafI7lCL1stXgTHlfV0pT/W4VVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:2d:0b:58:25:d3:d5:22:13:16:3e:83:b6:a7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Jun 30 15:01:07 2025 GMT
Not After : Jul 1 15:01:07 2025 GMT
Subject: CN=779ecd18dbcfbfc3d018c7b6b0a7678d352b0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:99:2b:70:79:74:1c:7c:42:ad:df:14:ed:
9e:3d:79:43:34:7c:69:26:90:26:54:24:75:d0:6b:
4b:a9:23:74:e1:72:b1:e7:cd:dd:01:1f:1a:d1:52:
a1:c6:cb:d4:9e:55:0e:64:79:b7:90:38:3c:d2:aa:
d2:e2:34:46:94:1e:b7:5a:5d:d2:23:89:c4:b3:46:
b0:f5:0c:0b:fa:4a:39:2e:ee:0b:5f:f3:31:ef:5a:
6c:2e:4d:21:9c:a3:a6:0c:6a:8d:c3:e0:b5:5c:6d:
66:bc:2c:66:d3:5a:82:03:ff:29:c7:3b:53:31:00:
8f:6a:d9:95:19:26:d2:f8:19:3b:a4:fe:f5:79:c6:
38:22:c6:3f:22:18:27:d3:14:a4:7e:23:85:85:0c:
70:1a:af:72:2c:55:a0:12:2d:a2:ac:95:6c:de:5e:
65:75:c6:15:79:fa:2f:cd:8d:33:d2:1c:d3:73:3d:
50:fe:23:c4:57:c8:87:b9:30:2b:04:9e:9d:8a:82:
29:39:f8:1e:03:99:f4:24:89:c7:b1:31:c2:9b:8e:
04:20:df:57:01:17:22:95:4a:14:0b:05:be:2b:24:
35:52:29:21:c0:47:86:c3:42:47:b0:71:98:5f:8b:
91:0f:2a:61:14:09:b4:8c:57:5a:7b:01:0a:71:c6:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9E:CD:18:DB:CF:BF:C3:D0:18:C7:B6:B0:A7:67:8D:35:2B:0E:CE
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:99:4f:c4:3e:54:d9:81:06:5a:8c:84:2f:cc:54:95:e5:
3f:30:21:d5:0b:1a:11:0f:7c:60:ae:b8:54:fc:80:0b:90:16:
9e:6f:ef:0d:86:ea:71:a4:3b:f0:a1:ea:c4:0c:4a:a9:8c:0e:
c4:d0:65:ac:d9:85:f6:23:03:89:ae:26:97:2d:29:76:8c:07:
2d:d3:c7:6b:63:5d:d3:42:ff:2d:05:30:91:f0:dd:49:2c:ab:
5f:7a:7e:56:5c:89:92:72:62:34:02:ab:99:b0:23:10:e5:04:
34:e5:a1:2e:a3:7c:a3:78:24:66:f2:33:7a:a2:e8:8b:c4:b6:
79:6d:4a:49:23:14:b1:51:45:c7:29:de:a9:7e:41:4f:8c:21:
2b:76:35:25:5a:d7:31:47:2f:a4:4d:94:97:b7:5b:00:d3:3a:
92:a4:32:6f:d5:58:06:ae:3b:2c:8f:8a:cf:fc:26:e4:fc:d4:
e8:b2:8e:86:41:b6:25:15:1e:ad:7f:7d:a7:6e:e0:88:2c:ca:
47:3d:60:c4:a8:c1:1c:f5:5e:08:d0:1f:e8:ac:4b:e6:78:33:
37:54:f7:23:e2:ef:7f:80:d2:c5:ad:85:fd:c7:31:08:00:ea:
fa:c8:3c:fb:91:e8:7f:09:63:76:dc:7d:52:98:c8:8b:48:7b:
8a:ac:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:24:14 2025 by rpki-client