Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: wnBolIPloi32C0vHKioRMhzHy+BVny9JJy7lXDabbFI=
Subject key identifier: 12:B3:FC:6F:BE:DC:0F:5B:D8:0D:71:7F:33:6F:71:51:08:2F:43:30
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 0197BB8FE171E2854DA9857AE36C53D494CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 12FA
Signing time: Sun 29 Jun 2025 12:00:57 +0000
Manifest this update: Sun 29 Jun 2025 12:00:57 +0000
Manifest next update: Mon 30 Jun 2025 12:00:57 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: Y7bfamRukn0o3O9r1smkuviKerNyT01cg9Um7Ym+hx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:8f:e1:71:e2:85:4d:a9:85:7a:e3:6c:53:d4:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Jun 29 12:00:57 2025 GMT
Not After : Jun 30 12:00:57 2025 GMT
Subject: CN=12b3fc6fbedc0f5bd80d717f336f7151082f4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:ea:50:93:59:6b:5e:07:54:52:fb:1e:d3:
27:ea:0e:26:ee:75:37:93:0c:5a:02:42:d0:b9:65:
b3:c1:51:41:7c:ce:3d:33:1a:a6:3b:78:7b:f7:6f:
61:97:a9:21:a3:d8:47:f6:05:57:b4:c6:f5:bc:fa:
96:26:3c:82:d2:79:33:aa:78:aa:fd:9b:9a:05:cf:
4b:05:9c:31:a1:d7:42:5a:9b:46:59:6e:b7:f9:bd:
2d:fa:07:0a:d3:33:22:8e:54:f2:65:9f:f8:1d:b1:
62:04:b4:ee:fc:a8:5d:3b:99:69:5f:d0:15:05:2d:
78:3b:26:e1:ab:0f:85:1a:6b:c2:b5:9c:cb:9f:b5:
b3:29:d4:b6:72:f8:7b:6d:0d:d5:88:5c:ad:b4:aa:
0b:23:18:e4:f2:ed:2e:a3:f2:32:f6:7f:10:c7:35:
10:b5:89:16:98:75:1d:45:f7:eb:07:af:a1:df:97:
6d:bd:3d:31:0c:57:f2:2c:89:20:01:97:de:f6:10:
b6:a0:87:16:27:10:8e:03:9b:12:6d:7e:a3:c4:4e:
2e:17:bb:52:12:5f:ba:59:0a:6c:11:3b:89:0d:fe:
08:e9:30:6e:bf:28:58:6d:6d:5f:59:c6:24:9d:19:
a7:2d:a1:5e:a4:3a:84:ba:35:9c:7b:f7:ce:ad:f4:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:FC:6F:BE:DC:0F:5B:D8:0D:71:7F:33:6F:71:51:08:2F:43:30
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:12:b5:c5:36:0f:9c:53:23:60:12:e1:03:76:66:3a:a3:
b9:05:9a:f4:0f:c0:df:14:55:d4:b0:cd:41:bd:09:9e:35:c6:
f8:cf:9b:62:b8:ac:27:6d:13:0b:d4:e1:3c:09:7e:5d:f6:3d:
34:3c:ef:e6:f2:e8:da:48:0d:d5:7f:14:c8:9e:a1:89:63:90:
41:ed:41:05:01:bc:97:c6:c5:c8:4f:60:3a:de:24:3d:7e:9c:
d8:8a:0b:a6:71:71:6b:2e:66:db:36:34:82:40:36:3c:e3:2e:
a0:92:37:2c:08:fe:03:d7:4d:fe:15:50:bf:f4:17:d4:a9:6e:
cd:12:c6:58:2a:5f:90:b6:10:32:e5:93:f2:8e:fc:15:1a:3d:
70:14:e0:2f:52:ee:5e:3e:7b:11:05:e3:19:1b:e8:23:56:bf:
bc:fb:58:ec:2e:8e:02:4b:5b:ee:e7:07:b9:34:d2:66:ff:44:
cd:76:86:0f:ad:86:0e:7e:3f:a2:86:a7:d1:86:fe:e7:35:f5:
f2:29:40:57:d5:fd:05:83:63:11:93:36:a3:13:0d:08:27:74:
30:21:57:5e:33:1d:64:47:05:ca:83:86:5d:b9:08:5a:9d:0a:
33:5a:77:be:d5:c8:e3:64:4e:04:c1:b3:0f:87:76:ff:8f:24:
21:08:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:51 2025 by rpki-client