Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: oa6FlxwoF7j9yAO8TVoRPQL05EVqtib9Z1ZGjX0doAw=
Subject key identifier: 5C:65:C8:40:B7:B7:28:0C:46:A3:46:9B:0A:6F:61:0B:B6:3B:E3:D8
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 0197B7B36DAA444456F86805C9B7E67334E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0118
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: AN2QN7hD+aNFNj7e4bRcfHoknYncUIJM5lKYiB10u3Q=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6d:aa:44:44:56:f8:68:05:c9:b7:e6:73:34:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=5c65c840b7b7280c46a3469b0a6f610bb63be3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:13:73:de:dc:96:68:59:07:10:cb:e3:48:
69:9e:24:e7:54:2f:1c:78:1b:a2:4b:7e:07:0f:a6:
4b:2f:4e:eb:ed:e9:d2:87:59:dd:59:91:2f:45:fc:
c1:7f:94:92:d6:ec:a6:ba:8e:9a:0e:37:5e:8a:46:
29:95:6f:9b:f2:99:38:8c:00:2a:18:3d:2b:db:43:
3d:43:31:6f:9c:a2:d4:a6:4f:1c:24:b4:3e:fb:33:
64:d7:af:b0:9c:14:b7:82:18:0a:13:cc:07:a3:5f:
ae:b8:89:da:00:da:43:83:a7:13:f3:dc:35:9f:43:
27:47:af:e1:d2:14:80:46:0f:73:11:be:2c:a6:0f:
dc:56:28:31:4b:4e:c8:2e:5f:99:80:fb:c2:ff:cb:
ac:43:4f:6d:1c:ff:55:93:4a:2b:5a:7f:98:35:ba:
76:fc:30:dd:de:fc:7a:e5:22:e6:78:c6:cd:62:9c:
2c:71:ce:5f:8b:23:3c:b4:9f:7a:42:9c:6e:59:f0:
05:89:d2:ec:3c:86:8b:d0:4f:db:21:5a:b3:7b:20:
09:ad:01:0e:1b:7d:76:8f:00:3b:69:90:69:70:3e:
8f:6a:56:f6:d8:8b:d9:23:f9:b3:84:43:30:5e:a7:
19:64:89:b8:29:7c:36:0a:ec:a2:26:27:e8:b8:cc:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:C8:40:B7:B7:28:0C:46:A3:46:9B:0A:6F:61:0B:B6:3B:E3:D8
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:78:6e:d2:6b:21:8e:d8:96:a8:d1:03:73:c9:a3:f6:5f:
a5:46:1d:a1:20:1c:dc:e8:18:7f:12:6a:60:51:4f:36:59:d8:
8c:c4:83:d8:f2:f4:2b:60:1c:5b:a6:78:65:3e:51:7f:3e:5a:
d5:27:5a:e2:84:48:5a:76:96:cc:f2:15:f2:5c:88:37:be:0c:
40:8b:32:77:cd:f5:16:1c:40:8e:79:cd:62:30:a5:37:2d:7e:
bf:80:70:89:f9:0f:7d:4c:79:52:a6:38:14:0b:2a:2e:46:71:
68:d3:30:40:b3:d8:b2:d5:ed:04:48:68:16:36:10:f1:68:59:
8c:70:34:84:b0:34:7a:58:63:54:26:5c:b7:01:9c:18:2c:2c:
e3:27:b9:8e:58:45:9e:98:28:ec:c3:18:be:64:53:40:91:10:
f4:3a:7c:99:9e:21:34:7e:ec:2b:24:d4:75:e4:31:be:ff:ee:
c6:6a:5a:cf:08:5c:4a:59:c9:44:db:08:68:78:24:47:71:c1:
73:3f:cf:4d:4d:4d:ad:ac:54:cf:4b:cc:be:c9:03:7c:8f:cc:
41:ff:97:40:6f:c7:96:7f:42:cd:39:a8:a6:c7:84:36:e5:d0:
a6:32:de:11:57:4d:20:42:55:e3:0c:52:bc:84:de:ba:93:31:
9f:b0:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:51 2025 by rpki-client