Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: VFIrQEyrhOEbo99yL9W3tKx0ikY/fosQ29croIzT1Yg=
Subject key identifier: 76:05:E1:4C:41:62:78:A8:FA:18:65:CB:B0:33:02:EE:E2:3F:96:AB
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 0197C56F23DA59B89824358EDB42706E56DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 0328
Signing time: Tue 01 Jul 2025 10:01:24 +0000
Manifest this update: Tue 01 Jul 2025 10:01:24 +0000
Manifest next update: Wed 02 Jul 2025 10:01:24 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: J3bBjPTLgSDhdJfTGn46WgG/cMEkM/r0A7Bn7nLxAtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:23:da:59:b8:98:24:35:8e:db:42:70:6e:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Jul 1 10:01:24 2025 GMT
Not After : Jul 2 10:01:24 2025 GMT
Subject: CN=7605e14c416278a8fa1865cbb03302eee23f96ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:6a:d9:15:ed:53:2e:9d:73:39:a7:dc:fa:
36:19:e3:f5:9e:70:67:bb:a9:c1:90:25:b9:0e:38:
3c:94:13:9a:d4:56:f4:07:54:5a:0e:7d:53:9b:09:
ab:0e:55:16:22:69:26:f7:89:c4:0c:5d:38:ea:2d:
de:c8:81:b9:49:58:73:b4:18:81:c5:db:9c:20:57:
4c:fb:f2:4f:bc:7d:1d:66:d8:19:2f:2c:c2:25:c4:
35:bb:d7:1e:04:2d:40:5f:67:b5:64:82:6d:0f:b0:
dd:23:de:36:3f:33:96:d5:99:54:8d:41:35:cb:e0:
30:be:64:08:a6:e2:89:f9:9b:55:d5:27:19:a5:71:
06:1b:51:5a:c3:a7:a1:00:ed:e4:1d:87:25:30:ab:
9a:3a:6f:54:1d:91:e0:bf:d3:fa:92:f8:22:de:78:
fe:18:89:50:e2:51:33:32:03:89:ab:b0:38:b0:5b:
55:10:6f:10:86:b8:68:a6:65:a3:fe:bf:8f:9f:39:
60:57:b3:bf:7b:26:45:38:e9:52:e0:e7:b8:b8:75:
2c:c2:b9:3f:e8:d0:41:a7:15:0a:17:af:e0:39:74:
f2:e9:2b:e7:45:5a:22:8f:a8:23:2e:59:03:bb:fc:
66:74:4d:67:dc:bd:45:85:91:d0:76:0f:86:76:50:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:05:E1:4C:41:62:78:A8:FA:18:65:CB:B0:33:02:EE:E2:3F:96:AB
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:e9:4e:55:e9:40:b4:41:bf:0a:22:d7:80:41:8c:fc:13:
ee:5e:b0:ee:53:35:83:db:d1:06:eb:51:e7:72:6d:8e:24:61:
4a:c9:f8:55:ab:9f:76:50:e6:98:57:eb:2e:d6:b7:cb:7d:f2:
29:d3:04:15:4c:57:75:b2:9c:38:b4:e1:44:65:10:a7:87:b1:
9c:8f:50:83:7e:d3:6c:ff:15:d5:53:0e:5e:a0:16:53:cf:6a:
b9:be:4c:76:bc:00:09:99:24:69:99:24:ed:b2:4b:7a:f1:ba:
61:fd:87:3f:8c:55:a2:f2:e9:f8:53:40:46:70:ff:71:ac:04:
6b:05:33:97:a0:a2:10:46:dc:6f:b2:06:2e:be:e5:87:93:38:
6e:01:a4:0e:e7:d8:76:b5:80:0b:fe:c8:38:35:fc:9d:fb:56:
d7:da:4c:c7:d3:47:9d:b1:d9:f6:f4:ef:63:50:03:4b:b0:cb:
58:40:77:47:29:9b:e9:dd:81:6f:ac:b4:a9:bf:84:d5:f8:e9:
73:11:d5:2a:74:73:35:fc:d2:b8:48:21:6f:e1:f3:c6:e8:8a:
d7:a4:3a:f0:42:42:1c:9a:59:37:19:6b:f8:28:14:11:a6:08:
66:44:1b:80:2a:3a:d2:80:13:8e:51:23:07:94:52:6a:34:27:
6e:a1:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:05:00 2025 by rpki-client