Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: fRkLl///MXE4d/L6b12AN/zPACqJiBQirY3D4bmluKU=
Subject key identifier: F5:3A:1A:25:EF:F6:33:92:50:FB:5E:78:16:AB:E7:DC:AE:72:DE:9C
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0197B6A0CCAA8EDDA469F722C9C65BEB06E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: 7GlqoJtzHk00ODtLA/ZBc/sRwh+8yzixI1Aik1GX2e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cc:aa:8e:dd:a4:69:f7:22:c9:c6:5b:eb:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=f53a1a25eff6339250fb5e7816abe7dcae72de9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:d5:f1:1c:32:fa:87:7e:47:d5:a4:ee:5e:
2d:45:71:04:0d:32:22:db:0a:11:b0:9e:05:95:05:
28:82:dc:b4:3d:99:91:21:c7:a4:b3:be:4b:ff:a8:
37:dd:b3:50:af:2d:62:22:c4:43:5b:45:f2:6c:88:
dc:92:f0:3a:7a:65:21:bf:38:98:01:7c:68:c9:0b:
23:3e:d3:b0:52:77:9c:7c:1d:35:f5:be:26:20:07:
54:ed:c0:94:04:39:1a:aa:af:34:42:82:8b:91:ee:
de:81:b8:7f:dc:72:77:a6:47:8c:20:e7:b8:d3:0a:
b8:ba:80:6e:28:02:03:bb:20:52:82:2e:a9:d3:5c:
8e:27:50:46:03:a1:cf:41:73:6e:94:9a:de:a8:af:
a7:f4:67:34:06:fd:49:bf:b2:ba:95:14:c6:61:53:
26:f6:2e:e5:de:46:62:f6:12:d1:5c:32:6b:c5:37:
e3:e0:e5:79:ce:aa:31:24:b4:eb:1b:41:9c:f1:12:
90:36:7c:c7:c0:c4:05:8d:72:91:6b:0e:c7:a4:5f:
5a:4a:f4:ee:d6:e2:17:7f:1c:dd:70:ee:c7:e4:a8:
9d:c6:06:7b:e5:c2:db:a2:93:de:ac:22:b3:7b:76:
ce:16:72:3e:ff:ae:0f:d5:44:ac:82:38:1d:b3:95:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:1A:25:EF:F6:33:92:50:FB:5E:78:16:AB:E7:DC:AE:72:DE:9C
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:08:82:aa:ca:8f:56:5a:5d:02:72:69:15:a3:de:59:bf:eb:
eb:41:c4:e2:d7:30:3e:47:f6:8f:ce:8a:b8:02:b3:16:2a:8a:
fe:7d:cc:d2:92:be:ee:09:19:55:72:cf:5f:f0:21:0b:a8:7e:
fd:fa:0e:db:40:9a:41:85:53:88:a6:ca:c9:c0:9d:1a:cf:6d:
8b:68:6f:85:59:ff:97:c3:f7:ca:9f:39:02:16:53:4d:16:f7:
4b:86:c1:cc:7b:f3:fa:15:96:5f:0e:b7:fb:54:37:8d:9e:39:
90:6f:84:86:2e:d7:4c:45:42:ec:e7:0c:73:9e:70:da:6b:25:
ed:e4:75:f7:2a:d3:fc:66:89:07:4f:ad:a0:bf:a7:64:9b:85:
72:d7:83:0c:fe:a6:bc:1e:c6:a1:b0:3b:62:50:73:b2:3d:c0:
72:91:97:a3:1c:4b:3f:98:c8:13:b4:de:bf:cb:f2:49:bd:67:
c1:77:52:cf:87:5d:14:95:e6:59:2a:04:20:22:93:58:65:d0:
53:89:20:8c:1b:92:d3:74:46:f5:62:66:ba:58:ae:eb:eb:45:
17:8b:47:17:3c:f7:c2:ed:ad:51:77:f4:5e:4c:5a:0c:89:51:
8d:70:99:51:71:9e:54:2a:13:ef:bd:f8:e6:03:95:f8:f2:8c:
92:6f:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:17 2025 by rpki-client