Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: MF8z5XmucRe8pe+LXFyZCzlZe5eTFJf8GRQELqof+P8=
Subject key identifier: C4:CC:31:1B:B6:C4:93:46:02:B9:60:70:8D:A7:9F:7C:8B:E9:E5:A5
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 0197B820BDCCDA4C26578488E8DD3DC37502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 20:00:42 +0000
Manifest this update: Sat 28 Jun 2025 20:00:42 +0000
Manifest next update: Sun 29 Jun 2025 20:00:42 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: ltEZ3o1PcflBNsTS7T+p6bZfj0RPq/K0ywotyZKxHiQ=)
2: rrr9lD-1fMY09SJ_d8OflA80hiM.roa (hash: dlPtuTm7KAs7BBecLGSQ0tXT2j/4sVnjNpjS2hSNO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:bd:cc:da:4c:26:57:84:88:e8:dd:3d:c3:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Jun 28 20:00:42 2025 GMT
Not After : Jun 29 20:00:42 2025 GMT
Subject: CN=c4cc311bb6c4934602b960708da79f7c8be9e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:0a:0b:09:5f:bb:63:6d:33:a2:32:94:87:
ec:ba:3d:be:e6:9e:6f:2d:67:b8:b9:0f:a1:60:c8:
d7:02:a6:1b:3b:ff:40:95:d9:c0:dc:4d:b5:b2:6e:
f1:e7:3f:f9:d9:11:d8:6a:e4:2d:61:19:3e:07:9f:
b6:f7:19:75:d7:44:1c:df:bc:41:00:db:14:f9:dd:
a3:f0:04:e0:3b:f6:7d:d5:5e:7d:0f:92:cb:8d:57:
8c:d8:23:4d:c6:42:99:1b:1e:30:65:be:78:1a:85:
b3:8a:74:69:0c:86:e0:75:5b:06:27:8c:b3:91:8a:
b6:d4:88:40:c2:2d:c7:3e:76:f6:08:27:f1:1a:c5:
02:97:c0:4b:88:f7:da:cd:1d:50:04:2b:21:8b:ed:
13:3f:8a:19:e4:b6:66:a2:df:ec:a3:dd:af:38:cc:
a3:24:d2:0b:b4:0c:93:15:96:82:9f:ae:f8:13:55:
ff:86:8d:2a:3b:fd:ad:13:60:f3:07:c9:71:d4:5f:
ac:1b:2e:6b:84:9e:92:68:a2:ce:5c:ac:8f:6b:05:
99:dc:43:8f:ff:74:78:c4:4a:e6:f7:26:2a:4a:1f:
32:5f:c8:ae:c6:36:10:86:96:17:45:84:60:b2:1d:
40:a5:78:5a:d7:82:21:57:7d:cd:b6:77:ca:e2:f9:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:31:1B:B6:C4:93:46:02:B9:60:70:8D:A7:9F:7C:8B:E9:E5:A5
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e8:ac:10:44:65:f1:50:83:06:dd:77:70:b8:9b:44:ee:a6:
bf:1a:07:f4:bb:16:5b:a5:61:61:7e:0b:36:bd:6a:06:e0:0b:
71:fa:51:35:16:39:23:9d:e5:bf:cf:78:c6:be:67:89:67:73:
a8:5c:39:77:fe:bf:bd:d4:e3:72:17:2b:ef:45:17:8c:b3:7a:
f8:b6:19:98:65:6b:dd:35:11:c7:4e:06:f4:1c:fa:90:5c:8a:
bd:f2:b4:de:cd:69:d8:9b:bf:fd:a3:db:4a:6e:3f:66:d3:76:
4e:49:e8:ff:fe:fd:e4:84:40:61:c6:bc:21:f9:6f:6c:8b:bb:
51:c9:73:97:63:ac:4b:36:30:fd:c4:91:d7:d5:a6:cd:61:71:
36:12:c0:9f:d1:c9:fb:83:62:38:73:8b:42:cc:d3:03:1b:ed:
1e:cc:c3:16:03:cf:f1:c8:10:d1:a9:ff:b4:a1:d9:85:13:60:
44:d9:d8:a4:6b:b4:b1:74:1b:ab:f6:06:a3:a6:94:93:6a:9b:
d1:e2:83:f4:b6:5b:ab:fb:3e:02:3d:30:d3:82:52:e7:dc:e6:
d8:0f:3a:df:7a:96:30:cd:ec:b7:69:ad:91:ce:a1:2e:52:b3:
60:51:da:ad:0e:e8:f4:e9:e0:ce:02:7e:2e:2e:10:de:01:b3:
0a:30:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:24 2025 by rpki-client