Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier: gJZI/pbAcv8HB7JU6Peyv8QYvtbZFEsuV6YT2if2wmg=
Subject key identifier: 20:34:22:CA:57:AD:C4:C0:F5:D4:DF:76:57:DD:12:8F:6A:2D:F0:1F
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 0197C94C04AEE37604128B3CCBCAD482787A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number: 08AF
Signing time: Wed 02 Jul 2025 04:01:31 +0000
Manifest this update: Wed 02 Jul 2025 04:01:31 +0000
Manifest next update: Thu 03 Jul 2025 04:01:31 +0000
Files and hashes: 1: BTXgC98Arq4VpE8p2rzGlekkKks.roa (hash: D0boEuEqJCqNZCUXYO9bIurCXG18fnwk28p+ov4i+/I=)
2: GGIWecpIopyHoGkyMoac3XO9YI4.roa (hash: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=)
3: UGEidt7A5RBgDSJN2enYLor_7Sw.roa (hash: Ot0TYYvqctoOalqMeGcLH0JJ7jIcv187XU8D5PJV2GY=)
4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: RjXfVgNImQRkc5AdZ7XpXXePAiYsfsL4jhbiglV0XoA=)
5: xgHz664AQPMntc1cKGqX8uLPb68.roa (hash: L7AjuBiSLP8pLMyCXeeg/SoD465XYb8TiAmRmmGuBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4c:04:ae:e3:76:04:12:8b:3c:cb:ca:d4:82:78:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Jul 2 04:01:31 2025 GMT
Not After : Jul 3 04:01:31 2025 GMT
Subject: CN=203422ca57adc4c0f5d4df7657dd128f6a2df01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:8b:4b:77:de:4c:82:30:ee:ca:3e:d1:69:
bf:9e:80:89:36:d6:13:75:cb:94:60:db:09:16:51:
47:0b:d2:6a:83:6f:0f:be:00:89:25:74:ad:6d:14:
c0:2d:39:f7:1c:5e:3a:6b:3e:c0:14:98:f6:e1:d8:
25:68:97:81:30:67:fb:d2:21:01:5a:86:28:cf:0c:
07:43:a8:66:c0:70:1e:0c:30:6e:dd:f2:eb:94:00:
fb:f3:dc:d9:7f:22:36:e7:48:06:56:36:1b:98:aa:
dc:19:14:91:70:94:be:65:01:b2:5c:1c:83:3c:8f:
13:c1:82:e3:c3:47:5a:02:de:81:da:42:9f:2f:f6:
70:b1:16:5e:c9:4b:98:d0:24:7a:a3:ba:9d:91:21:
8c:04:07:28:e5:21:de:01:85:60:39:fb:50:59:9f:
b3:25:a4:61:b6:00:8f:42:a8:c0:4a:94:57:15:be:
3a:f9:29:8f:c5:e0:fe:a7:0c:88:b8:13:f3:63:76:
97:fa:24:e5:72:7d:b3:94:3c:6f:18:e1:ba:db:70:
a8:f0:bb:82:6b:bc:62:b2:1a:b7:8b:fa:dd:78:ee:
bb:79:64:1f:4b:4d:08:7c:50:10:f9:f8:77:09:f3:
41:82:86:b4:38:4c:b3:67:5c:dd:72:69:e9:06:67:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:34:22:CA:57:AD:C4:C0:F5:D4:DF:76:57:DD:12:8F:6A:2D:F0:1F
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:ef:ae:88:de:41:0b:da:5b:f9:46:11:24:35:9e:e6:22:
5c:41:4e:43:2a:21:2c:b3:e6:c4:73:81:f8:2e:e8:ac:f6:da:
dc:33:e0:4a:e3:0b:55:7c:11:a1:6e:9d:1e:e2:08:87:f1:eb:
10:3e:cc:2e:7c:be:bc:99:0f:0f:2a:b0:ee:73:71:e2:9f:57:
11:1c:e6:9f:de:77:cb:d5:49:c5:b8:56:7f:ce:13:c2:b2:3d:
44:b7:52:8b:3c:13:1a:7f:72:aa:ff:a0:c8:c5:c9:ee:61:33:
14:f6:25:29:c1:0c:78:9d:98:a2:ca:59:a6:bc:d5:d5:f7:60:
4c:41:f5:f2:9a:6d:b3:43:81:a1:67:8c:c5:4a:84:6b:3c:fb:
5b:03:9f:79:20:c6:6c:6b:c7:e9:23:d9:1f:0a:5b:11:89:2a:
75:26:68:7c:37:30:fe:3e:97:c5:86:3d:1e:43:2c:a9:15:d9:
d9:95:1d:bb:c1:99:11:d2:a8:11:c1:ee:32:ea:92:d9:3c:71:
9b:86:b2:8b:f7:94:82:f1:34:15:56:7d:fc:61:90:28:67:ea:
b5:f3:41:86:da:ed:f9:80:73:94:66:81:1a:c0:90:5e:46:a9:
53:01:c2:e6:30:ea:ae:d7:1e:35:67:7b:e3:d5:2e:e7:8a:23:
9a:e1:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:17:45 2025 by rpki-client