Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: Z5LW8+UaPbnKim8pvbTvRwtg+Un60u8hm/MhrikxD7U=
Subject key identifier: 4D:17:36:DC:C1:13:F4:E5:C9:D9:79:17:77:99:D9:F0:F7:25:4C:09
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0197B6A167E2B4EA3896D9F3C3E3A849799B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0A86
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: X3PBdh1T8fBjOfurI7SUN2rb0oke/SlEyycf9icT+yY=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:67:e2:b4:ea:38:96:d9:f3:c3:e3:a8:49:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=4d1736dcc113f4e5c9d979177799d9f0f7254c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:97:3c:56:f6:26:9f:e2:cc:49:f3:f0:42:
f3:18:cd:0b:d7:c4:d9:84:79:a0:19:dc:66:c1:86:
18:6d:80:31:1f:17:30:e1:90:29:8c:e2:d2:03:fc:
43:b8:67:de:b7:78:f8:db:67:dd:9f:9a:42:f5:cb:
f4:6c:ec:75:94:5f:eb:ae:08:fa:75:98:0b:7d:5b:
c4:6a:ba:94:76:4d:d5:38:b2:03:30:40:51:98:c8:
bc:e8:6a:05:d8:dc:08:60:15:f6:88:04:3b:68:68:
6b:b9:68:78:57:a7:de:6c:ff:ba:b6:7a:dd:e4:ed:
a5:ba:73:86:8f:84:8f:3c:2e:5f:e1:fc:90:4c:87:
b3:b0:24:f1:b5:44:fd:de:09:47:89:e5:26:14:c0:
51:08:14:ea:9d:75:32:6c:13:32:79:7c:e6:fb:05:
98:0c:a8:a5:7e:ad:f3:71:05:a5:3f:aa:40:3f:93:
98:6c:98:bf:47:dd:74:43:ab:d3:ed:b7:9b:14:16:
79:fc:92:44:b7:08:32:96:f9:69:8b:bc:1d:d5:9a:
8d:d9:ba:cd:b3:92:80:cf:e7:a1:56:0a:cb:0a:fa:
be:15:1f:90:43:56:4e:8f:5c:07:6d:23:2a:e3:b6:
6f:78:9d:e9:eb:a6:8b:b5:93:80:d5:55:3a:36:8f:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:36:DC:C1:13:F4:E5:C9:D9:79:17:77:99:D9:F0:F7:25:4C:09
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:fc:fe:ec:23:fa:64:59:ec:de:64:19:0b:00:09:5b:c8:
c4:d4:90:95:cb:7a:27:a1:58:3c:c3:ba:4c:8a:c5:dc:5c:57:
df:0d:e2:6b:23:06:9b:b9:b9:6c:7b:8c:af:18:fd:e6:d5:96:
35:50:4a:e4:4f:d4:f0:7f:a4:44:2b:3f:dc:08:b0:0c:8e:33:
f6:a2:ae:05:26:be:05:bb:f6:fb:71:91:c4:c6:63:da:ad:75:
60:47:8d:43:ce:6c:83:a4:0c:51:82:fd:80:44:d6:d6:be:b0:
10:88:15:77:34:8e:f6:bd:22:6e:41:e1:62:7d:94:f9:69:43:
6d:f6:e8:d9:6e:0a:8b:7c:a7:81:55:f2:e2:01:06:b1:ad:de:
c6:09:e0:50:16:e2:92:c2:72:62:67:77:6e:44:5e:7a:0e:0b:
78:93:c5:72:fb:99:7d:09:8f:19:ee:15:f2:43:91:d2:79:d2:
51:49:6f:c9:89:d2:5e:23:4a:35:19:5a:8a:1c:4a:5c:7a:65:
32:06:70:12:87:ef:84:7f:2d:1b:c7:3c:fa:6a:fc:62:0a:db:
db:de:cc:d5:e8:02:17:a7:a6:0b:31:f5:cb:fd:a8:04:2b:4f:
cb:0a:0c:3f:fc:6c:b9:9f:43:02:f4:67:66:1d:40:69:89:ef:
5e:1f:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:37 2025 by rpki-client