Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: CB2cff9iw7xZqtbnCh9RxhCSWP2bhShCZ5moP8tPqgw=
Subject key identifier: 1C:B4:09:C7:EF:C4:6D:AD:14:CD:3A:1C:50:C3:53:65:4E:EA:CD:FE
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0197B6A1DE557F1CD30EB9F376C4A735975F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 08D7
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: xWc6UTtwjntds1n11VjX0xkEpixDh6tRPsQR5/R/gxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:de:55:7f:1c:d3:0e:b9:f3:76:c4:a7:35:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=1cb409c7efc46dad14cd3a1c50c353654eeacdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:b5:6c:d0:f6:4e:e5:72:46:b7:3f:b2:16:
77:23:d4:27:c7:bb:29:a7:d9:20:20:e7:ab:93:f5:
65:d2:3a:c9:e0:2f:38:fb:3d:25:b7:1c:66:e1:05:
e8:bb:4f:4c:2c:ec:63:70:c8:c7:c5:ab:5e:47:11:
2d:8b:36:69:85:d9:81:e3:4a:e6:ab:6b:8a:ad:61:
4c:a6:30:33:1a:a8:21:b6:38:53:71:73:2c:df:62:
28:6c:8d:1a:04:61:94:5e:3d:b7:07:12:cf:73:19:
33:e3:b9:e8:a5:bb:51:42:d4:dc:32:82:4a:09:56:
cd:6d:62:12:3b:58:7a:17:5a:e0:4a:6f:13:e8:98:
02:b9:3e:79:ee:f0:03:d4:58:19:cf:3e:0d:23:77:
46:d4:78:d3:d5:30:db:46:93:cb:1b:67:19:36:ac:
9e:52:37:ee:e1:a6:e9:ef:42:dd:fd:27:80:4a:eb:
01:da:e5:00:c4:c7:2d:53:12:f8:de:b8:16:05:66:
b3:36:13:da:fd:fa:a6:09:da:18:e7:cf:a8:ff:0b:
20:cb:c4:68:38:c4:7f:64:5d:eb:c4:9f:06:d6:d1:
26:7f:2e:89:ca:26:c8:42:40:60:04:8b:6b:df:ba:
b6:20:a8:9f:49:d3:0c:cf:6b:8a:51:ca:42:1a:1e:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:09:C7:EF:C4:6D:AD:14:CD:3A:1C:50:C3:53:65:4E:EA:CD:FE
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:46:23:73:a0:ba:cc:c6:f0:9c:c9:96:e9:43:56:a9:db:8b:
00:f7:5f:96:3c:62:61:e7:0b:06:85:de:0d:9f:16:14:04:ee:
2c:3a:2d:85:f9:cd:e0:b4:ef:ee:ef:ef:8a:dc:7a:48:d7:48:
8a:28:4e:5d:08:db:46:06:ad:31:74:4b:99:c8:d3:72:14:81:
43:16:63:32:4a:58:e6:30:b7:ed:9c:20:ee:85:11:c0:9c:64:
fb:29:9e:d7:f3:aa:b4:7f:7f:a7:08:2d:d0:5a:52:27:d7:0d:
96:6b:6b:c0:5e:f7:35:b4:ec:b5:f7:da:ba:91:5c:07:6c:21:
99:86:d3:67:16:d0:82:e4:be:40:bd:76:dd:12:60:dd:39:e4:
58:56:ad:52:e9:08:12:60:0d:5b:f0:ba:6f:f7:0c:a7:09:43:
d6:ea:87:6f:90:7a:27:8b:5e:02:62:15:f5:b3:ed:02:1d:6d:
ba:d9:3a:06:00:39:93:80:be:ac:cd:a3:d5:86:51:9a:87:41:
92:49:90:df:8c:53:65:a9:0b:a1:92:b1:1c:9a:45:75:14:11:
80:97:cb:de:d5:08:89:76:3d:09:62:22:c9:f4:28:43:48:58:
fd:0a:b3:cc:4d:7b:88:5f:8d:2f:18:0d:bd:37:00:77:c6:b1:
aa:77:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:42 2025 by rpki-client