Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: 1yHR5P39GL92ozffRuvWdD8b/SJtucfZisA5FQiYjpQ=
Subject key identifier: FF:12:68:17:08:63:28:63:A3:5C:E0:5C:95:DD:D8:0B:A3:62:ED:8C
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0197B6A1E9B9946A309718EC11E3F4BB7B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: Zu/M8cX1xJifFySJgK0ZdYy3w18SvoiWjGj7krCem1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e9:b9:94:6a:30:97:18:ec:11:e3:f4:bb:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=ff12681708632863a35ce05c95ddd80ba362ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:ca:af:6e:85:e9:da:51:f1:b5:d2:02:73:
cd:8e:bd:94:a6:57:2d:8d:d1:2a:38:a7:a1:e6:dd:
a0:4f:ad:c6:63:fa:4d:b1:93:9c:5e:2e:1d:04:9c:
32:2b:df:c0:d2:f4:37:6a:25:d4:c7:08:ba:46:e5:
72:48:bf:90:88:50:e4:1e:c2:17:d8:75:ec:e4:8a:
13:fe:2e:97:89:88:d9:86:ad:78:a5:32:f2:38:fa:
89:c7:66:e3:8e:7d:89:57:7e:b4:49:e0:33:b3:4d:
db:4f:97:85:97:bc:91:05:83:2b:0c:bf:10:18:9c:
ce:13:dd:a4:9b:fc:3e:50:70:f5:ff:c2:44:7e:9b:
2d:39:91:7f:4b:78:95:71:3c:23:7c:9a:14:2b:c0:
6a:97:0e:43:4d:55:43:53:f4:40:66:5a:86:fe:7d:
90:ae:73:7a:9f:4b:31:9f:43:f9:0c:72:de:25:63:
b0:b2:f2:92:e9:c5:e7:86:87:8f:16:27:cc:5e:d1:
fa:c4:44:84:de:ab:4f:28:ce:d4:99:2a:e8:1e:6b:
52:88:cc:10:00:f9:87:83:0e:bb:31:c1:2c:1c:c9:
0e:5d:09:88:5e:33:8e:7b:3d:d9:59:cc:ed:74:93:
80:16:af:c4:1a:24:87:eb:3d:4e:ba:49:4b:fa:89:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:68:17:08:63:28:63:A3:5C:E0:5C:95:DD:D8:0B:A3:62:ED:8C
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9c:06:6f:ab:bf:be:0a:a5:0f:b9:90:59:45:51:a0:76:0d:
24:bb:28:5e:01:8f:6e:be:1e:bf:50:d2:76:48:e2:6f:ad:b2:
e0:fe:f3:11:ff:bd:35:b5:6d:2b:4d:c7:1d:b2:21:2f:b2:3c:
9f:73:e7:c7:d0:02:ba:c6:ab:31:e7:d7:8a:e9:f7:1d:75:31:
6e:82:8a:5e:d9:60:52:d7:b4:4d:3d:cd:b7:0b:76:83:39:8f:
f9:75:a5:6b:e7:e4:ab:64:30:d9:22:f7:68:2e:89:39:d8:ad:
ca:9c:77:bc:3e:90:f1:66:ab:80:c6:72:e7:35:17:6b:41:e1:
21:0e:01:90:88:87:5d:f4:c3:c2:dd:27:69:18:d1:52:68:b8:
2e:8a:d5:e5:b2:8a:f8:2e:e6:ba:f3:3f:9a:bd:52:98:39:83:
ca:da:c9:f7:37:ca:c4:5d:24:fd:cd:7c:a6:46:58:04:49:42:
af:27:07:b3:b3:a6:99:f0:66:d9:b3:8b:26:40:97:28:4f:99:
1f:aa:c5:79:24:dd:8a:78:fe:bd:cd:89:d0:5f:e5:7f:ce:06:
89:ec:6e:41:95:c0:a8:9d:45:1f:09:84:78:33:81:01:7d:b5:
03:cb:d9:4c:6c:17:95:13:2c:0d:7f:d7:52:47:d4:55:d7:87:
58:ae:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:19 2025 by rpki-client