Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: OPpDDpc9FT6/pfG5kHB0hyZHJAznQtxaZav9ix+WGQg=
Subject key identifier: 10:8B:AD:9D:D6:31:6F:C2:7E:8F:2D:84:8A:81:14:E1:3C:AD:61:A5
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 0197B7EA5C1F4EB6DB1DBA76D934CBD3BFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0C8C
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: InTaJhkgrWJTyfubqcV/etvttH2CuIBRnX0IDSkpXxc=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5c:1f:4e:b6:db:1d:ba:76:d9:34:cb:d3:bf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=108bad9dd6316fc27e8f2d848a8114e13cad61a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:a8:27:dc:8c:60:1a:be:0b:81:f7:64:44:
06:01:0d:6b:12:db:84:9b:48:ed:b7:cb:b3:c5:22:
25:0c:1e:69:8c:04:6d:bf:76:9c:89:4b:f5:33:8e:
bf:7e:42:f3:3a:b7:83:ea:d2:f4:9b:1a:90:97:8c:
4f:b0:0b:3d:b2:34:6f:5e:25:5d:16:f9:93:e6:09:
52:65:16:20:f3:c6:aa:3c:74:f6:34:73:aa:21:eb:
49:15:62:1b:a4:c6:8c:8d:14:35:9e:39:cf:d0:b0:
40:d6:c0:c1:9a:0b:ef:2d:83:a0:94:60:b9:aa:fe:
95:b0:37:f3:8c:9b:57:01:4f:10:44:a1:74:2c:a0:
21:0d:44:21:c3:98:33:c5:20:37:8c:ce:db:68:6f:
29:46:60:f9:5b:a5:61:b2:6d:6d:56:64:9e:6f:f2:
06:f5:2a:e5:5b:5f:69:3a:84:d8:b9:f4:63:d0:6b:
b2:b1:af:50:7b:26:73:e9:ea:c4:93:05:95:9d:b7:
e0:0f:41:a4:c0:ff:49:23:eb:77:22:68:2a:aa:77:
f3:f4:0d:d5:53:af:8e:d6:f0:18:4d:ab:02:46:6c:
d1:73:0f:af:f0:4a:e4:de:2d:3e:d6:71:44:93:0f:
a0:90:e1:95:2e:78:a3:ed:51:a1:20:b9:2f:ea:08:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:AD:9D:D6:31:6F:C2:7E:8F:2D:84:8A:81:14:E1:3C:AD:61:A5
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a5:9a:1c:7c:d0:f3:e9:ec:da:c0:50:a7:42:b3:7d:e4:64:
37:98:c7:16:df:1d:e6:25:de:cf:08:f6:02:ab:94:e7:a5:1a:
4b:de:55:bb:0f:a6:80:5d:5c:fa:d1:e1:70:bc:f8:2e:05:f2:
03:22:17:ae:5a:13:61:1b:89:13:6a:bd:33:08:2a:38:66:ff:
4a:a8:d8:f2:d0:f2:f8:22:bc:1c:87:5c:bd:05:36:e5:ae:1e:
83:ed:ef:b1:09:68:c2:ea:7a:2e:12:a0:1f:4f:7d:f1:5d:8c:
65:80:a5:e2:f0:22:26:cd:ac:8a:9d:f2:b8:df:a6:18:e9:4d:
91:ed:85:99:a6:42:c3:65:ff:04:e3:17:82:26:f7:80:86:e8:
47:7d:28:66:d7:76:ea:ce:e5:1b:f8:82:7a:50:aa:ec:10:d3:
fd:16:d5:0f:70:19:e6:be:b6:42:71:42:6d:12:68:9b:f8:f0:
44:bd:d4:ff:26:ba:15:f7:28:03:fe:e0:33:df:4c:ab:3a:ad:
80:9a:fd:3c:17:70:73:0b:c5:a9:87:81:f9:b1:04:65:bb:7d:
2a:aa:d1:a4:8a:a7:eb:ed:dc:d5:67:ad:05:b3:dd:46:0d:bc:
f6:3e:c2:1f:a1:2d:05:0e:e5:d6:34:77:9c:0e:b6:c6:7d:5f:
d1:b2:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client