Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: yb1XAJ7hvc8LEvEhpajux8omEzz/PxdWSZh7s5n9fvA=
Subject key identifier: 4C:B0:4A:36:BC:69:83:99:70:15:21:E6:E2:D7:B2:05:01:CF:61:51
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 0197B6A2328527126BDD010515C3D6F6B3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0B16
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: JKYwRWWbDLJvi32X/9GekL76MDF9PYl2co/963L/p38=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:32:85:27:12:6b:dd:01:05:15:c3:d6:f6:b3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=4cb04a36bc698399701521e6e2d7b20501cf6151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:a6:4b:2e:90:9e:fc:59:c1:32:40:48:6c:
f9:05:49:1e:1d:c7:59:3a:85:62:75:b6:3e:66:34:
8f:a7:f2:df:8c:5e:1d:8b:07:8d:60:20:c4:67:52:
cd:9c:7c:20:e2:e2:18:08:76:f6:d3:52:8d:a8:cb:
ad:1a:38:6a:0b:42:f0:d9:39:dc:dd:d3:3d:80:9d:
d6:a8:9d:72:7c:14:4a:76:e1:41:6b:d1:33:66:fc:
51:f6:80:e9:ea:45:a2:75:b5:3d:c3:1e:83:82:21:
f6:23:02:8b:d0:cb:f2:ec:a4:7b:17:2f:fe:63:ee:
82:86:be:db:e5:5d:b9:d9:2d:35:d1:59:62:c4:51:
c0:8c:25:c4:8b:eb:eb:a2:e8:38:0f:0d:a8:b2:52:
53:02:43:bf:85:66:a1:4a:f4:d7:d6:bf:24:02:30:
ff:74:46:01:f7:f2:57:81:80:00:d7:cf:9c:2d:ff:
0a:25:b0:21:cd:b8:45:c5:df:b9:14:1a:ae:52:30:
00:56:44:f8:54:0f:9b:95:fb:2a:38:8d:9e:ea:b8:
15:49:8a:cc:17:9b:e9:1a:2b:1e:a4:83:a2:db:b3:
33:a9:3f:6e:67:df:9e:f6:ff:3e:26:07:2a:76:9a:
16:25:cb:c4:59:d1:6a:18:98:43:d9:4a:f7:f2:bc:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:4A:36:BC:69:83:99:70:15:21:E6:E2:D7:B2:05:01:CF:61:51
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:24:4e:25:a9:b5:44:96:2c:e3:08:10:cd:48:4a:c2:21:2a:
30:dd:05:45:d3:42:76:6b:d7:b7:8a:1f:a9:d9:04:36:fc:60:
df:b0:7d:4c:b2:30:50:69:3e:92:84:e1:55:53:31:9d:1e:73:
7f:ac:b2:33:ae:26:0f:65:26:e0:cb:0f:73:8d:c6:ad:bb:a7:
24:e1:bb:04:ea:56:76:9b:39:72:b4:37:9b:b3:66:3c:17:ec:
c8:03:07:f9:08:11:c7:3a:76:33:df:f4:83:19:1f:d8:09:2f:
78:d1:be:33:8f:a7:0e:b1:33:74:38:0c:45:11:62:e6:f1:38:
9b:d1:d5:97:c3:d2:6d:39:40:cf:f7:8f:6b:fc:3d:26:8d:9d:
5f:9d:57:16:a0:a4:9e:50:d8:94:1c:2a:44:31:1c:e1:cb:91:
3f:3c:54:0e:bc:81:49:33:15:70:22:a9:9f:ef:99:a2:fe:15:
00:da:db:f2:6d:5b:e4:29:34:4b:95:26:4a:34:6a:42:64:e8:
71:aa:c0:67:5b:59:70:1c:22:17:f5:ad:64:2e:21:e5:28:8c:
49:60:99:74:71:11:4a:1b:a5:bf:b8:b0:99:e2:c4:5f:be:ee:
30:1f:e9:d7:b4:8a:71:6c:f9:33:ae:7b:51:86:f9:c7:d5:92:
cc:69:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:21 2025 by rpki-client