Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: w7OqUZkTekpktxgIZN1rZml9urtQ9VML7GiMbrKs1e0=
Subject key identifier: A2:87:DB:96:47:F4:4A:4D:B7:DF:A4:39:8A:82:EF:D3:5D:C2:84:21
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 0197C75D32E1600873566E3D6C3CD59DF333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 0172
Signing time: Tue 01 Jul 2025 19:01:03 +0000
Manifest this update: Tue 01 Jul 2025 19:01:03 +0000
Manifest next update: Wed 02 Jul 2025 19:01:03 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: iQvzNxOeuMoNftJ69fzjwfOXgtBEtViHjgxmD+Z4D+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:32:e1:60:08:73:56:6e:3d:6c:3c:d5:9d:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Jul 1 19:01:03 2025 GMT
Not After : Jul 2 19:01:03 2025 GMT
Subject: CN=a287db9647f44a4db7dfa4398a82efd35dc28421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:69:35:b4:c4:6c:77:3d:6b:5e:fb:fb:b7:
e7:e4:12:39:af:98:9d:7e:65:1f:5b:c7:6e:cd:6e:
0c:4d:2a:59:9b:27:5f:6b:2f:71:52:4c:36:b7:8a:
8b:ff:54:02:26:a0:ec:fa:79:fe:1c:55:20:b6:45:
ca:49:c1:62:4b:50:8f:62:96:a5:da:de:39:f0:65:
8d:5b:9e:10:d7:a8:7e:9c:a9:3b:a6:81:1b:cd:b0:
a0:6c:4e:37:40:b1:fe:26:3c:85:2e:d6:16:03:12:
1f:de:5c:47:4c:99:61:eb:aa:12:5f:27:99:34:b6:
5f:fd:ba:fe:6e:8a:0c:1d:f9:b0:40:80:55:cf:60:
6e:20:6d:80:9d:8d:98:43:1c:e6:66:61:14:6d:f2:
5c:95:8f:65:9b:be:3f:f2:d3:2b:c8:8b:ae:0b:61:
49:f8:de:72:93:8f:82:c1:66:fd:ae:db:26:be:18:
6c:71:3e:47:c1:5d:f1:5f:a6:ea:82:a8:53:ca:8c:
41:ba:09:05:61:67:6a:0b:ee:64:5f:2e:aa:7e:8a:
64:49:40:06:5b:8f:e8:a3:9d:b9:8d:37:8b:12:c9:
de:01:80:5e:e3:bb:dc:2f:67:f9:7d:7e:84:9f:7e:
39:21:cb:d0:47:b4:2f:b3:38:21:97:17:21:bf:4e:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:DB:96:47:F4:4A:4D:B7:DF:A4:39:8A:82:EF:D3:5D:C2:84:21
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:8e:14:72:84:cb:14:78:6d:a7:3d:06:ae:82:14:94:db:
08:5d:f3:a8:1a:d4:73:a8:f9:a0:76:9d:4b:a0:91:10:e1:fd:
96:98:0f:9d:36:ed:d4:65:bd:a7:fd:90:e9:dc:e6:f1:9d:c2:
a3:da:96:21:b1:95:3f:5c:b2:e9:71:a0:3b:f1:ae:d9:5c:35:
33:c6:e1:d2:2f:8b:70:17:0d:e3:e0:4c:b0:85:25:91:ee:4f:
67:74:be:00:9b:8c:07:80:e6:7b:0b:d4:c0:b2:ca:86:38:bd:
33:07:82:f0:d9:82:4c:aa:f3:2b:39:ba:67:71:d7:7f:44:9b:
3c:ef:8a:02:33:f7:fa:a7:e6:36:6c:f7:5f:77:cb:0c:a2:6d:
a0:9d:99:98:16:b2:a7:d9:eb:2d:e9:c8:3f:6a:bd:e9:5a:eb:
ef:5d:9c:56:87:53:c4:fe:9b:7d:12:97:89:84:38:cd:f4:e9:
ab:07:55:1f:8c:58:45:b1:48:4a:d6:2c:05:1e:3b:ae:7d:da:
da:9e:b7:e8:91:43:19:c2:b1:d7:7e:d0:02:8c:bf:e5:7a:79:
21:dd:de:41:73:04:88:1f:e2:ce:e8:4b:98:f2:72:6b:49:82:
59:3f:0e:2b:8f:44:cd:77:6e:4c:bb:3a:b3:f1:5d:cd:b8:e7:
0e:ec:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:27 2025 by rpki-client