Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: N+45+VjMEK39Bp4i/hq6kElH6uAbHM82RFaBy//mV3E=
Subject key identifier: 98:81:40:B8:E1:DD:D4:8F:49:E7:76:45:CD:0C:87:4F:85:A6:F7:DF
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 0197B5C49DF60F9C3C5F4A74F1C7F2E1C618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:00:50 +0000
Manifest this update: Sat 28 Jun 2025 09:00:50 +0000
Manifest next update: Sun 29 Jun 2025 09:00:50 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: aAlm8CO/s7YGjof+fk9RYhKgR/RD2WsAkTfDH8lBsks=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9d:f6:0f:9c:3c:5f:4a:74:f1:c7:f2:e1:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jun 28 09:00:50 2025 GMT
Not After : Jun 29 09:00:50 2025 GMT
Subject: CN=988140b8e1ddd48f49e77645cd0c874f85a6f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:8f:34:76:ed:e4:91:72:66:a5:ae:37:7a:
24:3e:1d:92:d3:b1:50:7f:e6:96:65:52:29:c6:a2:
e7:de:c3:0e:bd:b1:3c:cf:94:7d:12:48:49:18:c0:
2c:4d:d7:13:26:f6:57:36:29:e7:99:60:02:2f:f3:
ec:fb:e9:70:3c:a9:18:80:d9:24:95:cb:6b:62:2e:
fd:97:6d:64:c5:6e:b3:10:b9:6d:d3:8c:26:4d:86:
65:85:5b:5d:b8:36:9b:8b:5a:cd:4c:82:34:c3:83:
b5:f0:87:71:c1:95:a4:b4:cc:9e:08:ce:0b:ae:c7:
72:ec:50:9a:e7:c7:4b:a1:c1:d4:de:7e:cd:05:dc:
55:6e:22:f2:b2:29:24:08:7f:b7:11:c6:8a:24:c7:
ae:3b:1a:06:5b:67:17:68:c9:4b:70:b3:90:d1:2f:
6b:f0:05:c7:98:22:e0:16:6d:b0:df:ba:3f:7b:be:
6e:bc:51:0f:78:27:81:39:b4:b6:c2:de:7d:c5:86:
2f:3b:a7:5a:ae:db:cd:7c:36:26:8c:fe:08:a8:d3:
a8:83:08:c5:ba:6a:cd:3f:57:9d:6c:0d:8a:60:48:
6d:ce:e4:51:79:ed:4b:f5:de:bb:b3:fc:5f:18:d6:
ab:0c:cd:a1:d1:04:db:59:05:63:06:05:fe:a6:cf:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:40:B8:E1:DD:D4:8F:49:E7:76:45:CD:0C:87:4F:85:A6:F7:DF
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:f9:2d:d4:30:18:8d:77:5e:ab:85:5d:a2:00:3f:94:cf:
99:df:d8:06:94:70:04:e1:60:62:72:1f:47:b3:3e:5c:7b:21:
44:10:ef:94:5c:8b:f7:f5:87:90:af:6b:dd:87:98:2f:c7:1a:
7c:12:a1:b4:31:7f:8e:30:ab:17:72:7b:04:4b:23:44:2f:ff:
08:66:60:a7:38:a3:6e:34:b5:d4:48:fc:4a:9a:b0:61:84:0f:
85:0f:f4:ea:52:1b:6c:4c:18:c2:6a:49:b9:5b:8d:b3:6c:0c:
3e:1e:72:1d:2a:90:d7:73:22:99:79:d9:77:50:6b:39:2c:96:
79:5e:c4:fc:f1:ec:6d:19:67:2b:63:cd:0c:8e:fc:04:c9:f6:
be:8a:4f:a4:1f:6b:77:48:1f:55:f6:e8:40:cd:c6:c2:3a:9b:
b1:82:1c:d3:61:8a:bd:dd:03:a3:1d:70:21:8f:05:b6:37:05:
28:51:1c:91:26:01:df:7a:18:86:77:0e:57:61:b7:e4:a6:13:
b2:d6:bf:09:9a:00:93:ac:46:6e:c0:9f:3e:64:d4:d7:e0:55:
21:4b:f1:65:3a:ef:d1:48:49:56:22:16:75:eb:41:6e:0e:b6:
29:67:ff:97:70:f5:07:23:ad:2d:c2:6b:72:8d:b8:ac:d0:12:
23:5d:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:40 2025 by rpki-client