Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: yS95ge88OHsBI3GtNbtn7h96hCVmsDJ4ywxHlsNUFM4=
Subject key identifier: 85:91:10:35:7A:33:D5:9B:C5:B4:6B:09:69:17:DC:50:63:C6:ED:E6
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 0197C1C949828F8916493C88E90898B416C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: CA
Signing time: Mon 30 Jun 2025 17:01:23 +0000
Manifest this update: Mon 30 Jun 2025 17:01:23 +0000
Manifest next update: Tue 01 Jul 2025 17:01:23 +0000
Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: MoACO9XThxB1ZLlRIkbKahceE01DTdMv6Y56O2XQmAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c9:49:82:8f:89:16:49:3c:88:e9:08:98:b4:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Jun 30 17:01:23 2025 GMT
Not After : Jul 1 17:01:23 2025 GMT
Subject: CN=859110357a33d59bc5b46b096917dc5063c6ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:e5:50:da:b6:95:74:4d:94:f1:33:d3:bc:
32:a8:de:3d:fb:6b:88:a3:5b:02:ad:20:ba:da:18:
4f:9c:e3:8b:2d:5f:3f:b7:90:52:91:6b:6e:12:9a:
67:f0:06:f6:7e:dd:01:ef:fc:c3:6b:47:47:1e:9d:
70:4c:5d:21:0e:88:62:db:00:69:16:b3:29:00:b2:
d3:29:1b:c6:d0:61:e2:da:89:9e:91:4b:69:4a:25:
26:1e:ad:6c:00:4b:af:c5:cb:91:9e:9d:64:29:11:
05:25:ce:a2:75:fd:99:d4:55:03:6a:34:a4:b3:15:
74:60:28:f3:a4:eb:70:76:83:83:0c:8f:8b:23:7b:
dc:77:ca:98:25:59:57:96:9b:05:27:4a:11:a8:19:
92:2d:d5:b0:e9:cd:6e:17:a4:22:63:7a:a7:ca:81:
7d:f6:6d:e1:40:68:20:f8:a3:3e:27:8a:00:84:fc:
64:b1:a0:fd:e5:20:29:69:ca:14:04:d8:fe:a7:26:
5e:e6:b7:42:33:36:f1:6e:be:49:04:98:24:65:c2:
22:14:d2:c2:4f:84:9d:5f:d4:32:62:f8:cb:55:df:
e8:78:87:ed:20:4b:c1:51:62:1a:37:70:29:2a:cb:
20:21:82:d0:e4:34:7b:4f:b3:c5:94:ce:cb:28:fd:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:10:35:7A:33:D5:9B:C5:B4:6B:09:69:17:DC:50:63:C6:ED:E6
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:92:5c:8c:90:52:65:2f:94:b4:36:16:a5:12:04:d8:34:
ce:61:7a:af:c1:74:75:63:39:60:6b:c4:8b:44:04:b1:e6:03:
ce:82:68:2f:20:0c:c7:10:99:e0:c6:05:cb:3b:1a:92:ca:a9:
09:ef:26:33:a2:92:9e:16:6c:db:6f:5c:7d:8a:90:ec:a7:81:
58:87:8d:d8:a6:01:15:38:43:a8:76:3a:3f:8f:15:76:ff:a2:
c7:1d:69:29:3b:ab:55:bc:37:8b:a5:8c:db:13:31:d3:e1:b3:
08:1c:29:bd:24:f7:10:44:6f:0e:b6:d1:c3:fb:c9:fe:f0:8f:
f6:79:80:94:2c:80:0e:7f:b4:95:1e:d9:5b:b3:8e:0f:ee:0d:
5c:26:12:cc:fc:5a:4f:21:63:d2:36:8f:2b:a2:24:2b:38:ae:
b4:0c:f0:64:ce:88:3e:d6:bd:01:96:ab:ff:36:38:a9:4f:86:
86:59:3e:ff:ad:cc:73:ba:d2:59:86:7f:c5:5a:9f:6e:6e:b8:
a9:92:8e:b6:cc:aa:db:b3:87:45:65:37:6e:56:1c:ad:47:39:
cd:dc:13:de:cc:ab:c5:c1:d5:51:0b:d8:0c:17:db:47:16:2a:
a9:40:da:88:78:97:7f:b5:bb:b0:30:d0:4e:02:5c:3a:71:1d:
8b:a3:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:20:37 2025 by rpki-client