Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: 1xt8vqiMOybziFQg53ZgL1x1FTmGajGu8tu2Utur8ek=
Subject key identifier: AB:36:0E:14:CC:66:08:6A:C6:2E:E9:9B:8F:98:0C:D5:E4:98:5D:A2
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 0197B70EA39101EF3D7A9D47806561D3DC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: pnIiHgJYxk48zA2N7EGiWR5WJUormFr6nwHZ68AePzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:91:01:ef:3d:7a:9d:47:80:65:61:d3:dc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=ab360e14cc66086ac62ee99b8f980cd5e4985da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:2a:93:a6:fe:92:2e:8c:35:95:6c:73:9a:
53:f8:47:d1:92:6e:41:03:dc:3e:a5:d8:aa:fe:f3:
7d:6d:5e:5a:24:3f:6e:cf:ea:be:35:0e:24:da:48:
18:df:32:a8:8c:89:be:10:6d:7b:d5:29:87:6b:e6:
78:cf:1c:29:b1:44:30:4c:fe:82:c8:45:65:67:7f:
33:49:47:22:b6:01:3c:60:05:d3:f8:1f:d6:4f:3b:
c3:d1:98:10:3e:00:3e:89:f2:8a:d5:a0:75:96:46:
a7:04:2e:48:fd:b4:ae:98:e9:ed:cf:99:f3:dd:a6:
60:df:a3:19:ba:53:a1:ad:c3:72:e8:92:ee:00:08:
0c:70:ca:08:3e:0a:03:f3:f7:32:65:55:ac:6c:b0:
bc:51:81:96:f2:28:24:5f:5d:57:7d:e2:1f:6c:1d:
13:84:e4:c6:6e:c3:ac:90:77:83:25:c7:3f:6b:e7:
21:8f:fa:ce:6d:5b:fb:8b:9f:53:95:b0:75:18:d1:
7e:ff:c8:28:b0:a7:56:2c:59:e1:77:5e:9c:cc:fb:
bb:a0:72:27:bc:5a:5a:a2:b1:21:5b:e6:4d:4c:78:
fe:cd:18:63:de:7d:86:e0:83:7e:e6:97:22:3d:28:
e4:f0:00:27:a6:61:9c:87:fc:ac:85:86:f2:dd:c1:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:0E:14:CC:66:08:6A:C6:2E:E9:9B:8F:98:0C:D5:E4:98:5D:A2
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4d:55:3e:51:0a:f7:76:c2:40:c7:f7:ff:2b:70:c8:e9:19:
cd:16:ac:95:84:ec:62:12:9c:2d:40:2d:8c:d4:1d:21:5a:ab:
cd:e5:53:1d:b1:21:d7:e3:38:67:65:68:6a:67:08:56:6b:fd:
0f:1e:80:30:80:29:f0:2a:6b:6f:dc:6b:fe:4e:ae:e9:29:c0:
5b:2c:42:d8:a8:25:fe:a8:13:09:0e:ce:de:7c:8d:b0:4e:56:
e3:d4:d4:7f:2c:31:7d:5d:52:03:c7:77:e6:83:0f:d2:e2:8b:
10:9e:05:bd:e7:38:7b:05:e1:f1:8d:97:9f:17:b1:7c:d8:d1:
6f:13:f3:60:3f:78:96:56:71:de:22:67:d9:fe:eb:b9:e7:ee:
b3:2b:1f:fc:d7:0f:8f:19:d9:d2:5c:16:05:ed:fc:90:12:97:
0b:7e:a7:e1:b2:fc:f8:b3:8d:a3:36:32:09:43:68:f6:79:2c:
57:65:18:cc:ca:b6:32:ec:20:cd:80:ca:b2:e0:b4:e8:69:c3:
f9:79:54:90:8f:b6:0c:11:91:a5:11:47:1e:ed:32:41:47:5b:
eb:98:36:01:b2:7b:6f:35:fe:dd:ec:99:c9:f5:c9:82:fd:40:
1e:c8:d2:23:c6:8f:77:14:d6:7e:49:09:7d:69:4e:2e:64:e9:
5a:bc:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:05 2025 by rpki-client