Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: gUdvEJCCE3YFDWQdApn5+g1swnk+bY5MRSSptytAMRE=
Subject key identifier: 57:E6:05:59:C4:F7:27:88:57:0C:23:AA:50:D0:B4:57:D9:91:A7:11
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 0197B7B3030C1F91F50E5D06236EA9CC46F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: 7gLsFs5MczYZo2NGj3luQKGa4VsWOmbXf1j0PUjX1MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:03:0c:1f:91:f5:0e:5d:06:23:6e:a9:cc:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=57e60559c4f72788570c23aa50d0b457d991a711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:7a:6c:da:f2:74:12:9d:55:ad:50:da:20:
8f:7f:88:15:00:45:2f:76:16:cf:3b:25:9e:85:5d:
61:0b:e6:d0:a4:ac:2b:73:ba:81:86:40:4d:52:67:
61:f4:e5:5d:e1:5b:ab:bc:a6:6d:38:75:1f:d2:ce:
b1:4b:80:15:01:65:24:82:86:80:af:fd:9c:25:15:
0f:7a:bf:a9:69:6a:3b:67:72:a6:96:47:7d:bd:21:
8d:2c:a1:be:53:bf:5a:83:e4:6b:c0:bf:c9:bc:f2:
d6:f3:9c:bf:c3:99:b8:a1:04:42:ea:f8:0c:11:56:
cb:89:04:a3:fe:cd:0c:64:19:31:ce:bb:00:da:d0:
af:30:6e:da:91:ad:4b:dc:dc:25:bb:5d:a3:6e:fd:
99:af:80:9e:d7:d6:15:f5:72:ad:18:77:e9:cf:c4:
c0:f0:f0:23:c6:b2:7d:f2:b8:70:d8:f4:74:17:78:
43:a5:f0:cb:2d:9a:4e:a5:b5:01:8b:62:4f:89:2a:
af:88:04:ab:9d:74:be:24:46:c6:8e:cf:6c:97:e1:
89:93:82:ec:67:14:22:32:1e:7c:e6:84:8c:0f:d7:
f8:fe:f1:3a:3f:2b:ef:63:bb:0f:74:0d:2c:da:a7:
05:75:c1:fb:2c:d8:b6:09:c4:d5:d4:cd:54:7a:95:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E6:05:59:C4:F7:27:88:57:0C:23:AA:50:D0:B4:57:D9:91:A7:11
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:5f:72:0c:8c:6a:9c:ab:2c:17:9d:76:4f:0c:a7:cf:c8:
b2:10:dd:78:b6:5a:d1:8a:00:e9:1c:45:9d:71:e8:de:9b:86:
ff:3b:56:0b:b1:90:2b:20:e8:6f:7f:53:11:c1:0c:f3:0a:7e:
24:76:9a:c3:41:63:b8:b4:f1:d6:51:8c:ee:06:bf:e5:0e:2d:
43:bb:c8:dc:07:e9:36:18:bd:5a:ec:26:11:da:7e:b1:47:c2:
f9:24:36:33:7b:37:b7:f5:b4:8f:f0:e6:7f:65:bd:42:39:9f:
da:eb:9e:a2:1f:6e:0c:90:b5:9e:38:20:48:b8:cd:94:b1:e9:
0c:da:37:34:90:a5:62:9f:62:00:9d:14:1f:59:49:8d:3a:0f:
12:da:3d:b0:03:08:55:73:62:7a:dc:e2:a4:f8:1f:b4:7f:fb:
a0:e1:a4:6c:7b:96:7a:f5:5f:51:f9:60:b8:6c:0a:67:97:5f:
0a:a7:e2:20:24:0c:69:e8:91:7b:3f:e1:e3:3d:9b:ac:2d:cd:
fc:58:76:e5:8c:9b:78:76:63:73:a2:b0:34:4b:b0:e7:b8:95:
2c:26:45:68:56:25:0e:cb:3d:87:44:90:24:b0:80:3c:33:a1:
a9:97:87:21:d9:db:3b:1c:c2:c0:81:95:b2:4a:a9:ca:d8:96:
37:1b:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client