Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: r5kjfM0UqdevqQ/t09YaO2nKjEOIZSsEyhF6LFaBAKE=
Subject key identifier: 53:76:52:60:36:58:6B:C3:0C:78:CA:11:7D:13:A6:F4:FC:B1:39:ED
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0197B77C84E69285A95E52972CFADC291D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: +2WH9zi6Iz/32AAA4RlQ+XXZ434MWwJn+V4WoBDydbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:e6:92:85:a9:5e:52:97:2c:fa:dc:29:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=5376526036586bc30c78ca117d13a6f4fcb139ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:15:85:1e:39:e5:6b:c4:3d:42:11:28:da:
67:a2:9b:c4:f9:1e:50:de:68:db:6a:0b:57:22:9d:
fb:8e:ff:5c:57:d0:30:44:fc:e0:d5:52:1b:4d:1c:
cf:5c:28:37:d8:e2:08:cd:17:26:4b:57:73:90:66:
db:6f:39:0b:19:12:e8:8d:36:eb:a6:f8:a5:dc:04:
3d:49:e7:c7:c5:45:a1:a6:0d:75:23:6e:59:e7:a0:
fe:ab:dd:a0:08:1b:26:68:b7:d5:69:b3:cb:93:03:
e5:20:05:a1:1c:1d:bc:07:e7:48:1b:30:1e:18:3f:
66:ae:b5:c2:1d:24:98:19:05:25:1e:14:00:9a:60:
f2:37:15:84:58:fc:ca:cd:69:43:7c:d9:0d:42:b6:
3c:fa:8f:36:ed:02:46:c5:4e:aa:55:f0:8b:8e:21:
9d:97:a2:7b:89:0e:88:ac:b8:0f:58:83:90:2c:c4:
1b:60:29:f0:9a:2b:74:44:b8:43:19:72:e6:99:42:
90:61:30:2c:b6:7b:1f:87:7f:83:af:e0:14:fa:3b:
c9:7b:07:7a:98:47:67:bb:68:4d:33:de:a7:5e:d3:
bf:13:eb:9c:d7:e1:bc:28:52:4d:ad:64:33:45:e6:
22:ac:ab:e1:b1:73:21:75:74:b1:00:2a:10:07:e4:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:52:60:36:58:6B:C3:0C:78:CA:11:7D:13:A6:F4:FC:B1:39:ED
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:3d:08:ed:1d:f7:24:1e:38:8e:a5:c1:a9:6c:f6:ad:ff:
3e:21:b9:1d:66:2c:16:e6:cb:f9:f4:b2:b0:4b:45:25:09:bf:
c3:04:20:9f:34:bc:55:67:97:2f:a1:1b:d2:60:b2:24:61:ca:
91:87:50:f4:d3:25:2b:18:a5:b9:34:66:b0:8e:24:95:46:99:
27:2a:e7:d4:2f:ae:e5:85:8d:6a:0f:b3:2e:79:f3:c0:8c:92:
01:81:12:86:e5:10:8b:72:7c:98:a3:0e:0a:7d:58:fc:70:5b:
b4:6a:e7:10:55:4a:99:a1:c8:51:a8:b6:53:81:bb:60:e0:f4:
a0:97:79:0f:6e:ac:56:40:a8:79:29:e9:3c:37:6c:a3:83:32:
95:f8:16:4f:e3:fb:10:c6:93:d6:00:78:72:a1:eb:f6:55:89:
a9:30:00:4f:9d:31:b6:7e:5e:47:21:ca:fc:fd:e0:17:41:2c:
72:58:61:fe:af:69:25:b8:bf:cc:29:26:00:56:ee:af:74:a3:
2c:a9:3f:11:a8:1f:47:a7:3b:ed:a3:57:5a:93:4c:e7:a4:79:
c5:1a:ed:17:b6:0a:62:b9:da:26:37:51:47:6b:80:9e:1a:7e:
7a:ad:22:3b:a4:72:c9:36:80:60:80:d7:9c:08:57:66:4c:5b:
c5:1c:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:53 2025 by rpki-client