Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: Enayi6Itftl/kOJMzdFO14fR9ykdrYmffLNEYolPHCM=
Subject key identifier: 74:53:85:24:58:85:93:96:AB:2F:85:FE:CF:53:EB:5A:72:05:73:A1
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0197B70E8A7E7BBE4011FB8C497E1DD2D91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 154A
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: kd+unZD+MLR+nDoMSdeFQGdw/zTmbPrwg01B946IT2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:7e:7b:be:40:11:fb:8c:49:7e:1d:d2:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=7453852458859396ab2f85fecf53eb5a720573a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:06:dc:0c:cd:5b:c0:e6:95:e3:04:d4:1c:
24:58:60:86:00:1c:a9:71:9f:16:e1:2c:ad:62:4f:
02:e1:5d:43:86:ba:8c:25:f5:db:4a:e8:a8:1f:68:
52:96:b1:d2:52:68:46:9d:64:1b:9a:7f:1a:a5:09:
1d:6e:fb:a5:cd:a0:26:c7:9c:a7:3f:1d:7b:fc:7e:
20:5d:a8:a7:0a:9f:e1:53:65:87:33:b2:29:99:f7:
1c:23:c5:f2:29:ed:76:6a:3a:4c:24:7d:1b:71:5c:
f9:c1:46:83:73:eb:b3:7c:24:8e:d2:63:ad:ac:57:
2c:88:35:99:b1:30:5e:f7:f8:3e:1a:15:e1:cb:a4:
2e:e6:f4:03:28:a0:a5:ce:d8:5e:4b:2e:40:9a:bc:
8d:43:a5:84:38:89:14:66:1a:bf:bb:3d:2d:a3:7d:
0c:2d:8f:d9:db:5e:2e:89:c4:2d:e1:ea:e2:61:07:
1c:f4:99:f1:89:85:4c:41:3c:04:29:af:20:48:f2:
fb:93:90:ff:1c:9f:b0:a9:b3:d5:f3:d1:55:f9:3c:
b1:fc:34:f8:33:97:f2:4e:b0:9e:af:9b:bf:68:cd:
49:9b:8f:4f:f3:8c:5a:e5:ba:f8:bd:4e:35:a5:17:
f2:c0:05:c7:8e:6b:aa:0a:1b:00:f8:dc:99:de:1b:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:85:24:58:85:93:96:AB:2F:85:FE:CF:53:EB:5A:72:05:73:A1
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:e9:34:2b:54:b8:0a:49:8e:2e:cd:95:48:69:fe:6a:80:
2a:de:0e:7f:08:2a:8e:ff:b2:c5:e6:ac:45:ef:21:57:0b:cc:
88:c8:47:cb:bb:89:74:a6:93:c3:fb:f3:cb:e0:0a:55:29:c4:
53:09:e4:d2:dc:68:8c:93:4d:f7:0a:5c:8c:8f:9c:15:ed:10:
8a:ed:c5:2c:2b:4c:46:92:29:a5:cb:01:69:37:a7:3a:e6:da:
44:55:3d:33:f7:65:d2:6b:08:f9:ff:38:b2:74:53:ef:6f:23:
ca:70:13:e1:02:43:25:aa:08:cc:e0:10:80:f9:25:80:84:d0:
f6:f3:b2:91:1f:61:fe:80:4e:71:b6:af:5a:e0:e6:a9:6c:97:
68:8a:18:84:ef:15:66:96:88:4c:2e:24:1f:36:a5:1d:4a:65:
23:47:2b:4c:08:3b:e1:2f:a9:bf:9a:b0:45:3c:50:51:bf:58:
52:af:45:eb:47:44:71:02:ce:d1:62:aa:6d:d0:15:0e:06:85:
08:d2:a2:ff:0f:7e:22:2d:d6:f9:b8:10:8f:02:30:16:01:23:
01:a0:eb:00:49:31:c1:5d:bd:73:a3:c7:ff:b8:93:00:a2:0d:
17:2d:72:aa:f2:05:35:61:6d:a6:8c:16:1a:ce:79:a0:32:f8:
9a:76:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:30 2025 by rpki-client