Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: 38tw2bgMsyv6ECCIvE4LRqKDdPMYTCLAO+py8Z/cXsI=
Subject key identifier: C1:32:98:C0:CE:64:69:B4:09:87:3A:29:C5:36:F3:41:A6:2E:6A:C1
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0197C537EEADC66C27006A8473D6441482E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 09:01:06 +0000
Manifest this update: Tue 01 Jul 2025 09:01:06 +0000
Manifest next update: Wed 02 Jul 2025 09:01:06 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: 0lC4oDJUxmdJeWd+pOXhUrvP7UgTHSrWq3uSwRNr9Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:ee:ad:c6:6c:27:00:6a:84:73:d6:44:14:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jul 1 09:01:06 2025 GMT
Not After : Jul 2 09:01:06 2025 GMT
Subject: CN=c13298c0ce6469b409873a29c536f341a62e6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:3d:cd:d8:e2:3c:a4:83:76:d3:ee:c8:77:
c9:85:0c:8a:9b:31:f9:52:19:65:ef:8f:8e:b2:db:
f4:a8:e8:f2:af:b1:f1:76:1b:e1:65:cb:e5:aa:5d:
45:93:ae:a2:aa:62:e8:1e:ab:cd:63:ec:f3:80:b7:
d0:2e:4f:5c:fb:e3:bd:dd:b9:ad:92:04:ef:08:fc:
ae:da:ed:61:f7:54:bb:67:7e:1f:37:fc:e1:0d:44:
29:4d:06:0a:86:59:18:52:2d:bb:3d:bc:0f:b0:53:
28:ea:e8:69:fb:67:cb:13:ee:7f:2f:71:cf:f8:57:
50:ab:8e:2d:03:8d:e7:df:55:89:5f:60:27:da:94:
e0:39:74:9d:ec:84:4d:ba:e1:eb:2c:ee:84:a3:f1:
6d:aa:95:da:fe:97:c3:26:df:52:81:a5:d8:04:b6:
c0:9c:69:a6:1d:ba:78:40:e2:2a:49:d3:1f:da:5e:
a0:f7:5b:c4:ab:6b:0c:0e:06:48:96:73:08:60:f0:
e1:d6:11:f9:54:3e:47:b3:91:9e:4c:e6:ff:e8:2e:
86:2d:69:74:66:73:76:3d:36:db:65:71:a1:fe:f4:
61:5d:74:fd:ba:de:98:7c:2a:57:6d:a6:88:e3:f1:
6a:6a:5e:58:5c:6e:c4:7f:df:8f:e9:30:16:de:de:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:98:C0:CE:64:69:B4:09:87:3A:29:C5:36:F3:41:A6:2E:6A:C1
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9e:8d:2a:6d:3c:56:27:72:3e:87:34:c7:74:f7:15:78:11:
ed:69:e8:66:d3:aa:28:f5:dc:45:c3:8d:fd:c1:db:9c:8c:55:
4a:7a:b0:84:8f:2e:1a:b7:da:7d:e2:db:79:8e:4b:17:08:82:
0a:23:b0:69:4e:7c:a5:cd:68:6d:04:3e:83:e6:26:17:51:b4:
a7:3b:c4:44:78:be:25:85:96:73:df:c9:fe:f6:1b:74:75:d7:
8a:28:a6:50:cc:5f:52:db:71:6c:05:af:d2:d5:a6:2e:f7:13:
84:ac:9e:cd:47:38:28:6a:16:c5:18:41:69:d5:10:7f:fc:9e:
87:70:76:4f:a8:47:2a:32:c0:fc:87:d8:a2:60:ab:02:e2:3b:
96:37:b5:ed:45:3b:7e:b9:ff:9b:cb:c6:38:1a:8e:68:fe:51:
9b:4f:c4:d0:6d:4f:a1:9a:6d:ec:80:1c:3c:3f:30:ea:3a:2d:
2a:fd:61:28:63:17:3f:83:d9:c4:9e:9b:78:2f:32:4f:8e:a1:
59:2e:8f:a6:f3:9d:61:c3:39:b6:ff:f9:83:81:18:9d:a9:74:
af:ab:91:24:d2:51:ab:8e:3d:61:f6:55:31:04:bc:00:ec:86:
19:d1:7e:70:77:81:b5:22:96:d5:f7:85:ab:62:71:4e:65:f8:
50:d7:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:18:04 2025 by rpki-client