Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: JbZqwDBxf1UTvINfnW3kDudB4xn4YjiI4zse/+kpbx8=
Subject key identifier: 62:AA:56:4E:48:58:81:FD:69:0A:C1:E9:DC:3D:82:10:0B:A8:9C:C5
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0197B9D8A2AF96560C09A689931B100096A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 12A4
Signing time: Sun 29 Jun 2025 04:01:11 +0000
Manifest this update: Sun 29 Jun 2025 04:01:11 +0000
Manifest next update: Mon 30 Jun 2025 04:01:11 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: NBKHI2oiI1qmo17HT6Ki+0ar7AxHGCVLLtUNkeTKMdc=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a2:af:96:56:0c:09:a6:89:93:1b:10:00:96:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jun 29 04:01:11 2025 GMT
Not After : Jun 30 04:01:11 2025 GMT
Subject: CN=62aa564e485881fd690ac1e9dc3d82100ba89cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:b4:f4:73:df:c9:19:3c:09:c0:77:e6:4d:
ae:08:32:05:0d:36:3a:85:ef:e0:a3:a1:ab:ec:00:
da:a4:5a:d9:8b:31:fc:87:79:06:42:bf:a8:c6:c4:
cc:c5:ab:25:18:66:61:d8:4c:b6:de:36:b7:68:21:
dc:9e:ed:3e:b9:27:7a:89:a0:88:b3:fa:73:06:2e:
c9:1e:c0:95:08:ff:94:7a:52:01:7c:f8:33:ca:05:
d3:e8:b0:8d:1f:9c:ca:5c:d4:b3:09:46:74:4e:08:
14:4e:c4:a3:0d:56:6e:1a:dc:6a:37:f9:08:b2:a1:
25:6a:f1:67:31:a6:68:b1:1b:0b:71:52:a8:0e:fa:
5f:9f:34:bf:a2:2d:0e:a5:9d:44:35:f9:1c:2a:2d:
55:d4:55:b7:e1:16:46:4e:21:50:d3:37:2d:81:0e:
f9:da:1d:46:e6:8c:18:10:52:da:11:fc:a3:a2:5b:
cb:e5:b0:d5:c2:55:94:75:f6:20:65:1e:bb:93:d1:
a9:53:c5:08:e5:83:57:3c:b3:5c:86:b9:38:3e:2e:
1e:fe:2a:0c:66:5d:c4:d4:6e:af:13:2c:29:da:82:
8b:f4:44:78:d8:cc:05:2e:70:c0:d0:9b:38:9b:67:
e2:a5:7a:53:08:62:64:50:e9:89:c6:e2:2f:3a:13:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:56:4E:48:58:81:FD:69:0A:C1:E9:DC:3D:82:10:0B:A8:9C:C5
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:d1:be:bd:56:9d:a8:7f:d9:7b:3b:61:00:76:42:5b:73:
d0:7f:1b:81:d8:36:74:1c:fe:f2:3f:08:49:22:a8:d6:c5:cd:
6e:b1:90:19:e6:90:5e:ac:e2:db:2d:98:f1:a1:d2:3f:6c:18:
26:60:f9:a6:f4:e9:05:e6:b7:ce:27:c0:dc:7f:1e:1b:ae:0f:
bd:5c:58:28:91:bd:88:31:42:7e:5c:1c:4e:16:82:57:e9:99:
10:ed:03:9a:a5:f9:36:9b:e9:c0:c1:df:a0:d2:94:ff:af:94:
25:e1:87:42:8c:32:b4:cf:6c:42:de:4a:21:fe:c2:8e:a2:64:
df:a7:ed:83:6c:8a:0e:68:20:2f:6c:fc:01:a2:21:3b:b4:5b:
57:7d:08:12:21:56:43:84:bf:9c:b1:59:f7:ee:c5:c4:0c:ab:
75:2c:73:09:f5:57:d3:a9:56:a8:ee:f6:15:1e:ed:ee:e2:76:
0f:ad:d4:83:4c:10:d3:8c:77:ab:df:ee:b6:a0:1d:d8:5f:1f:
10:cb:10:c2:0d:db:53:29:f3:c6:5d:df:cf:e9:d2:71:f7:00:
22:c6:0b:13:8b:89:a1:61:47:a5:82:67:ad:d9:48:6d:c5:dd:
40:ed:2e:80:40:0e:90:21:05:4d:55:9a:4c:6a:96:f9:17:41:
e9:d2:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:42 2025 by rpki-client