Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: xo09fy5e6RDzTVKSKDDhYMrRcie6cfy6ELZKeRgEETg=
Subject key identifier: 12:92:4B:71:CB:18:D4:4C:8D:87:82:BC:7B:8D:F4:A6:94:CE:F3:6F
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0197CC4D301762C4F6BA03008059DAD8AA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1493
Signing time: Wed 02 Jul 2025 18:01:39 +0000
Manifest this update: Wed 02 Jul 2025 18:01:39 +0000
Manifest next update: Thu 03 Jul 2025 18:01:39 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: aBHmojL452rAfuvDl9QebYgjt8mgJmju9s6NGjIvWQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:30:17:62:c4:f6:ba:03:00:80:59:da:d8:aa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jul 2 18:01:39 2025 GMT
Not After : Jul 3 18:01:39 2025 GMT
Subject: CN=12924b71cb18d44c8d8782bc7b8df4a694cef36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:5f:51:66:e8:25:a8:b0:27:db:42:a5:a8:
12:c4:bc:29:77:fe:13:f9:fd:19:af:27:69:42:88:
aa:02:4f:67:34:66:e5:8f:42:d9:03:81:07:12:11:
43:37:a7:30:59:82:87:2a:fa:53:14:cd:00:6a:00:
63:f3:3a:d7:12:c2:8e:e3:a5:e8:d2:b4:1c:b8:d4:
75:3a:02:ab:1b:79:4e:6f:2f:e7:4a:94:fd:7d:4f:
73:b6:9a:62:8c:27:28:83:2e:b4:94:13:65:2f:b0:
a5:88:c4:6e:d1:66:8c:7f:77:90:1b:3b:87:bc:f6:
76:0c:f6:02:de:95:53:d2:7b:c5:fa:1c:84:c4:5f:
25:5a:d2:1f:e7:75:e8:52:8c:d3:07:31:06:c4:86:
37:00:8c:99:e2:38:67:01:16:b5:b8:60:13:7e:4d:
b1:d6:be:50:87:7f:53:d1:fb:92:ee:7f:d1:7f:c5:
e0:15:e9:03:36:36:d6:fa:a5:28:33:2b:86:4d:23:
6c:8c:29:99:fc:09:8a:dd:eb:d0:c0:9d:cb:e4:95:
f1:61:9d:de:e4:b4:2a:6a:2d:3e:af:51:97:7b:0b:
69:8d:17:03:1b:2d:12:26:78:6b:c8:c7:a7:15:29:
d9:26:8b:35:75:9d:93:15:0c:37:28:9f:4f:55:48:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:4B:71:CB:18:D4:4C:8D:87:82:BC:7B:8D:F4:A6:94:CE:F3:6F
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4b:93:e4:7c:10:cc:71:81:9c:5e:2d:16:aa:41:7d:c4:49:
84:f4:1d:e2:cf:ef:a2:fe:29:49:fd:77:b9:70:f6:71:46:83:
39:c6:81:1c:b6:a6:9a:9e:27:a3:ab:c4:42:7a:a7:2e:09:82:
b7:5c:50:ba:bc:a7:ee:f6:8c:00:6a:93:5d:62:83:34:de:a0:
4d:c2:05:58:e4:4d:d5:a0:0a:ab:70:b2:13:37:d3:5a:6a:b2:
37:09:f0:22:37:48:ab:1c:95:a3:af:25:6a:0f:ca:11:9c:57:
88:50:d1:67:e5:20:ed:d8:11:05:f8:cd:39:47:75:bc:c1:9e:
b9:1c:7c:f8:14:ed:ac:14:e1:1c:70:10:f1:fd:51:14:1b:67:
5b:be:15:cf:b2:89:18:fe:35:0b:1f:62:2c:b8:a0:17:8e:d6:
f6:43:19:01:f0:7e:06:4d:75:f9:ba:d9:8f:b6:fc:71:d8:a7:
db:65:60:49:43:79:21:ed:6c:95:37:bd:74:7b:f3:88:6e:67:
22:e8:64:97:37:c5:26:b1:8e:e8:70:90:2d:f9:38:4f:5f:a5:
7d:ea:71:02:e5:3e:19:32:47:af:90:78:6b:8e:c5:b6:8b:80:
16:8a:6c:33:b6:68:50:ca:e3:04:c5:8c:d7:68:5d:50:28:29:
c0:3b:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:19:40 2025 by rpki-client