Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: Gi8U3qibnqcUAn3GCdGbwx8m0GmCRWmaNStCYbi5p+8=
Subject key identifier: 0A:1A:73:77:DE:7D:A2:FA:6D:E2:CC:FD:58:3B:19:E2:37:10:23:56
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0197C838D1197DC943E0FFB623F62941174D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 044C
Signing time: Tue 01 Jul 2025 23:00:56 +0000
Manifest this update: Tue 01 Jul 2025 23:00:56 +0000
Manifest next update: Wed 02 Jul 2025 23:00:56 +0000
Files and hashes: 1: RtwNd0kIIB4fJfHreOuMYKMR7lc.roa (hash: qbEtbkjwEQIcvAZsD7fY24iBMXF9LqUeMZOAB812XzU=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: l2XR1mhyOR/xNlf4LJ4mYZE0/b9O4vSmwRoalZDqAFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:d1:19:7d:c9:43:e0:ff:b6:23:f6:29:41:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Jul 1 23:00:56 2025 GMT
Not After : Jul 2 23:00:56 2025 GMT
Subject: CN=0a1a7377de7da2fa6de2ccfd583b19e237102356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e6:dd:02:3c:62:13:0d:02:33:44:24:ab:37:
4a:47:3f:66:fb:3e:25:2a:72:fe:81:ae:91:ef:91:
ce:3b:2f:2b:d7:e3:94:31:2c:e5:f7:3d:4e:a2:58:
5b:a9:82:6a:13:79:ca:44:44:67:9c:f1:9d:3a:7a:
98:3d:68:1e:8d:16:6a:77:bd:64:fa:ae:c4:b9:b7:
8b:9a:be:c3:63:2b:ce:c8:35:25:5b:4d:58:54:af:
f3:c8:25:41:3b:ca:0e:df:a5:52:4f:cd:db:f5:14:
72:06:8b:ce:3f:d9:6b:5d:34:67:a3:29:47:72:10:
c3:53:60:62:4e:62:92:fa:f4:9b:4f:b3:64:58:93:
51:ce:cb:b1:af:25:3c:57:f4:4b:5f:ec:39:07:09:
91:b1:6a:43:d4:32:b5:d2:f9:2d:03:af:45:4e:e2:
48:34:c7:0b:84:e9:10:ed:38:09:c7:97:1d:00:69:
a8:80:27:04:87:50:73:53:82:d7:0c:a8:f5:86:72:
16:b0:25:e9:22:ea:68:6d:c4:26:5b:08:c2:ac:17:
3c:00:02:49:54:13:03:c4:9b:2f:8b:ac:ad:f1:b0:
b3:9d:f8:85:ab:f8:cd:8f:fe:a0:9d:a9:7a:80:ab:
d2:78:ef:68:04:b0:09:1e:a9:6c:5f:6b:89:03:77:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:73:77:DE:7D:A2:FA:6D:E2:CC:FD:58:3B:19:E2:37:10:23:56
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:19:38:e3:d5:59:2c:f7:7f:f0:0f:9f:a7:2f:52:1f:fa:c9:
9c:cd:c2:12:07:83:9b:26:63:23:b1:3a:82:5a:89:74:3e:98:
a3:bd:ff:63:ee:6e:40:bd:0e:22:da:69:7c:4f:42:20:03:e0:
4b:76:69:2b:7b:e5:92:4e:1c:53:b5:bf:87:c4:a2:d0:c8:7b:
22:02:57:d2:a5:72:43:10:15:09:33:e0:49:36:99:10:e2:50:
c2:64:f9:c7:72:b5:08:3c:df:cf:2d:4c:2f:3a:52:51:ed:48:
79:ab:30:41:35:c3:4e:f1:5a:98:2e:49:9c:ed:17:0d:01:ed:
de:49:31:e8:6f:53:5f:8e:00:d2:44:07:41:51:de:bf:ae:3a:
b3:44:76:f7:8d:5e:f8:d6:e4:44:a4:65:db:d0:a5:ce:2c:e1:
8c:30:cc:87:dd:03:25:8c:a7:43:c6:c9:b3:38:9e:de:d7:65:
77:70:f4:ef:52:10:18:70:9e:1d:c5:71:62:d9:8e:df:43:08:
b0:37:a1:ea:2b:ac:db:3c:d7:5c:62:4e:1d:e5:10:35:0a:a0:
a4:f1:9b:c7:d2:b8:d3:48:d8:35:5a:cb:96:89:b6:e6:99:22:
9e:15:09:46:c2:a8:9e:71:f0:84:61:fe:5c:d5:c7:86:56:06:
cf:f3:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:45:22 2025 by rpki-client