Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: klAcik2UgCvhDfRYgixaIVyxLAocZ9uwEfIBFp7KpS0=
Subject key identifier: 4E:E5:A0:19:21:30:C4:FD:24:78:BF:B5:E6:B0:48:E1:61:0F:E6:8E
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 0197C6144B9C25CF786B93DE562B6C636FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 13:01:48 +0000
Manifest this update: Tue 01 Jul 2025 13:01:48 +0000
Manifest next update: Wed 02 Jul 2025 13:01:48 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: QNz815cpKOaGjNhkl1EKZT+pvrkyNYkY4CgsQoRDXzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:4b:9c:25:cf:78:6b:93:de:56:2b:6c:63:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Jul 1 13:01:48 2025 GMT
Not After : Jul 2 13:01:48 2025 GMT
Subject: CN=4ee5a0192130c4fd2478bfb5e6b048e1610fe68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:85:4c:6d:f4:bb:06:3a:f6:71:7e:e0:85:
66:ce:ae:0b:8b:b6:f7:ec:6e:cf:4c:ca:3d:4d:1e:
1d:3f:a6:20:89:78:2e:a9:f0:44:20:f5:8f:d6:34:
9f:35:16:62:4d:7f:4a:6c:fe:70:11:5f:27:47:b9:
4d:18:b8:7e:64:bd:ca:da:f7:81:be:b2:ea:4d:df:
d9:c0:96:82:18:75:65:72:f2:0b:3a:25:c4:91:1b:
df:77:bc:b5:1e:03:3e:0a:e3:d3:ff:da:1b:8e:a1:
de:ee:a3:14:3e:60:7d:5f:c4:1e:70:41:c3:19:80:
30:d6:44:89:73:c9:42:38:8b:71:75:f5:d2:b0:80:
8e:27:2f:29:d3:27:fa:d7:ef:54:24:05:b8:e7:e4:
ab:15:1c:cf:69:e8:9a:16:68:4d:cd:f1:ec:ce:ab:
9f:e0:39:0a:58:b5:23:81:b9:e8:c2:cc:f3:12:d1:
de:f2:20:37:2a:9f:f1:b2:64:e4:5a:4d:d5:93:ec:
41:6a:2a:3b:75:62:4b:ad:8d:c8:73:4b:00:fe:83:
fd:ac:a9:67:40:37:78:0d:de:e1:9d:6b:bd:23:e8:
3e:eb:53:27:74:9d:0d:92:b3:e5:4d:13:52:6d:c4:
7f:87:d7:fb:6a:42:2d:5c:7f:9a:f6:92:c9:74:5e:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:A0:19:21:30:C4:FD:24:78:BF:B5:E6:B0:48:E1:61:0F:E6:8E
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:8e:25:d0:53:ab:f0:38:a3:54:3a:a1:07:65:cd:5b:48:
ad:4e:d7:c0:e0:6a:1e:88:0a:8b:e4:cb:0c:33:6e:e5:15:f7:
99:81:2b:2b:87:85:18:29:a9:4c:fe:4d:a1:03:94:19:8c:3e:
67:26:57:56:37:a3:7c:8d:16:a6:ba:11:78:fa:3e:b9:07:b1:
23:83:45:ff:82:4b:8b:b2:ee:56:22:4f:cd:57:8b:1c:1a:5b:
9f:8f:43:4a:16:c2:89:45:87:24:12:05:91:c9:1a:12:62:f1:
1b:72:63:31:bd:51:68:42:b6:13:ba:9e:77:80:81:40:c6:51:
b2:ad:7c:e3:73:0b:35:ac:5b:4c:ef:b6:af:54:0b:b4:2d:6f:
4a:20:ce:be:be:77:2f:fe:5c:15:1a:9d:4b:9b:b4:e8:ff:c0:
98:9b:0b:de:cf:12:75:2d:4b:3d:81:62:6d:7c:ba:5d:69:6a:
02:8e:e5:c6:2d:2c:fa:d8:fd:29:80:fe:9c:90:da:53:30:4a:
8b:9d:d6:90:eb:07:ac:a2:5c:9f:19:86:49:d7:18:90:de:35:
da:dd:72:a3:db:08:7e:31:91:eb:41:c7:65:71:ea:f0:02:06:
d0:0c:47:e0:42:0a:c0:f1:4a:9c:b0:c5:44:5c:6c:33:cd:26:
da:fc:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:28:02 2025 by rpki-client