Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: DTeF2y7hJWFCZCBzySh+LiX5XsTrNbr4oWFuUXw4X0Q=
Subject key identifier: 5B:AB:76:FA:86:E4:2A:C6:15:E5:36:A5:D7:5D:1D:49:35:94:F5:9A
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 0197C64A5E60F97190095A6711283BFE594B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 14:00:51 +0000
Manifest this update: Tue 01 Jul 2025 14:00:51 +0000
Manifest next update: Wed 02 Jul 2025 14:00:51 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: HKoisuUnI3qNdktDW0SyX4HO9WLcxedN7b6rVOrJmqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:5e:60:f9:71:90:09:5a:67:11:28:3b:fe:59:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Jul 1 14:00:51 2025 GMT
Not After : Jul 2 14:00:51 2025 GMT
Subject: CN=5bab76fa86e42ac615e536a5d75d1d493594f59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:a7:c1:32:8a:a3:a7:34:02:4b:d4:6a:0a:
27:53:76:63:17:cc:f4:00:06:78:98:e9:93:ad:cf:
43:30:43:37:3b:90:86:48:99:e9:a9:5e:28:ab:06:
d5:fd:1f:f9:7d:ef:f3:58:58:23:7b:21:bb:7b:3c:
74:9f:22:31:01:a9:9f:32:3f:dc:ff:c3:45:ac:9f:
8a:6f:5e:31:a2:11:62:fb:56:3c:52:74:ec:64:81:
0b:7c:fd:eb:dc:ab:f0:ea:bd:b0:a6:cd:7d:7d:cc:
0b:b3:40:e7:bd:d9:da:9d:2b:24:7e:0f:01:d1:fe:
bb:29:83:88:f4:66:d5:b4:a8:69:26:35:e3:0a:c1:
6b:d2:91:b5:25:9f:60:86:cc:d6:c7:5f:5c:6f:4b:
53:3c:1b:7b:f7:d2:b6:34:5d:0c:82:e0:19:78:a6:
77:7c:5e:0d:44:f3:82:35:b5:e7:8c:9c:a4:46:71:
b8:df:66:be:7b:e0:5f:4d:a7:53:db:95:1b:a3:f8:
51:ad:d0:9d:d0:12:78:36:db:17:22:2e:00:b0:a0:
5f:8b:d9:2d:be:b3:4c:b0:01:85:0d:87:bc:85:25:
a1:74:70:91:89:31:2f:fa:7b:2b:de:d0:c8:af:57:
08:bf:ae:5d:0f:0c:83:34:86:d9:16:5e:5d:b9:5b:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:76:FA:86:E4:2A:C6:15:E5:36:A5:D7:5D:1D:49:35:94:F5:9A
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:07:e5:4a:6c:09:38:90:d0:e5:24:01:69:94:cb:53:e0:bf:
3e:30:db:fe:f3:75:be:86:e2:10:f4:cc:b1:55:9b:51:d2:6d:
1c:e5:5a:99:ff:f4:94:80:90:9e:06:1b:a7:df:34:9c:f2:6a:
3c:08:ef:c5:a8:0c:6d:92:de:7b:8d:63:e0:dc:3b:bc:12:72:
17:da:48:2d:91:65:22:3a:40:89:fe:f4:20:10:45:95:1b:24:
37:16:84:c9:28:2d:40:6d:97:9e:36:fb:d3:62:c2:c8:a4:85:
71:6e:d9:14:65:a1:3d:d7:79:21:d3:15:0e:0b:39:16:96:d6:
79:10:cf:0c:7d:27:39:56:03:6a:00:c7:27:e6:ea:c5:c0:5f:
a5:65:e6:db:2f:b5:b6:bc:ed:0f:0c:c3:e5:69:33:e9:b0:58:
d2:24:f2:49:c9:f7:05:4a:36:d2:31:a8:24:84:ae:c0:85:e5:
2e:09:14:fa:bf:ac:e0:26:85:28:78:3d:e6:0e:2e:7a:59:d4:
d4:e0:5d:08:7a:95:ed:53:28:31:41:1f:73:98:89:73:b7:28:
37:49:50:2d:90:b8:54:89:fb:34:da:00:62:a3:0d:20:5b:5c:
2c:20:b4:8b:4e:34:a4:c5:44:14:00:a1:1f:7a:15:3e:c8:e3:
ea:d7:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:31:37 2025 by rpki-client