Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: eaPNHvGCBOvqmbxkrKpI94kI6ZZZvsJp4Ugqf4QpVs4=
Subject key identifier: 2C:AC:7C:6E:A9:B2:A9:44:D4:7E:42:6D:C7:F2:4C:84:C7:8B:F1:D3
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 0197B820FD5C50D00E4BC8FCBC27E02346D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 0DCE
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: lfNm7w4FJcz1vT18XXw7FyVzB7hOBhLB8BHesxQTv2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fd:5c:50:d0:0e:4b:c8:fc:bc:27:e0:23:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=2cac7c6ea9b2a944d47e426dc7f24c84c78bf1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:99:ca:ab:13:57:21:f1:91:a6:7d:dc:e8:
10:9b:94:aa:a1:c1:86:46:4a:91:26:9f:01:02:33:
08:da:ed:03:99:d8:2d:1e:56:5c:11:43:5c:16:9f:
c0:85:47:55:d6:d4:c3:cf:83:f3:a8:e1:c3:c0:27:
ae:f7:8f:c6:88:b3:80:40:94:80:61:4d:7d:0a:e8:
a0:6b:38:bd:37:f1:de:a4:ee:12:00:3a:45:6e:75:
15:72:5b:42:78:92:43:75:00:53:bc:e4:eb:3f:f7:
6f:d3:fa:d8:4f:31:ef:6a:e3:2a:e5:f0:66:74:8e:
5a:4b:a7:fd:60:67:67:02:08:cd:0b:81:9f:06:b5:
c2:5e:3d:3c:3b:f3:c8:32:3b:25:47:26:e7:63:b8:
b3:de:10:1b:25:75:78:b4:95:12:21:ae:a5:a1:4a:
0c:65:c7:e0:1d:6f:e6:43:b7:f0:44:4d:2b:7b:d3:
0c:a4:5e:09:68:79:0a:72:5f:a1:75:9f:cb:d5:18:
a1:db:7e:d4:91:21:8c:33:0b:30:8e:5d:ac:fd:b8:
0e:40:67:ef:c6:7e:7b:a1:00:30:dd:79:0a:f4:32:
9d:64:36:63:bb:58:e2:76:e3:41:f2:87:43:35:e2:
2e:ba:07:b5:51:87:70:fc:e1:fa:e7:03:9a:24:50:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:7C:6E:A9:B2:A9:44:D4:7E:42:6D:C7:F2:4C:84:C7:8B:F1:D3
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:cd:42:06:f9:87:d9:0a:67:f2:39:27:8a:fc:f4:fc:f7:
cd:cd:0c:37:ba:ab:c5:3d:dd:d9:ac:45:02:e7:d1:fc:ce:53:
24:00:9c:82:62:08:87:c0:74:73:c9:c3:53:aa:d9:2f:80:02:
cb:af:35:e3:d9:d2:02:a0:79:e5:56:43:d1:a1:72:f9:aa:af:
7f:61:59:49:be:eb:82:eb:1b:7e:f2:b4:00:a3:78:54:a2:fa:
45:26:65:fc:7b:7f:56:30:3a:82:a4:69:0c:78:00:95:2c:ef:
1a:36:d5:22:ce:8c:0d:2a:e1:a8:f9:96:1b:e8:4c:66:2b:71:
6b:2a:9f:1e:fc:f0:9c:d1:5b:57:2d:f0:3a:4c:a9:92:08:7c:
16:59:d7:6a:00:1d:36:b9:e3:1d:05:dc:4e:a9:01:2d:c0:c9:
7b:e0:19:dd:57:a4:1d:cc:9e:e1:33:57:db:e7:65:e5:0b:c7:
b0:7e:ca:51:e9:87:a8:36:26:c6:de:f3:6a:b5:25:c6:be:44:
08:ea:88:c3:75:85:3e:f9:7f:fa:b0:e0:d2:84:d4:01:d8:ef:
42:b7:35:87:47:64:1c:af:2f:51:93:9e:a1:ab:76:7d:e0:f1:
0e:43:a8:c3:0d:c8:3f:91:2b:57:f6:8c:ab:c2:5f:ed:4a:a0:
99:57:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:44 2025 by rpki-client