Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: 0RV3FEfy7m1nXd5/WZ+tWg6v5DPelUmsOpg9Iva0u4c=
Subject key identifier: E8:12:0F:20:85:B9:34:59:25:7A:89:34:DC:5A:FF:4A:C1:66:1E:13
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 0197CD28C67BCE7B962C778F16A19DB3828F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 22:01:30 +0000
Manifest this update: Wed 02 Jul 2025 22:01:30 +0000
Manifest next update: Thu 03 Jul 2025 22:01:30 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 9CNFXERwAasvlXl4rqff4P8eyA2rquOpYMFuF4woTfw=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:c6:7b:ce:7b:96:2c:77:8f:16:a1:9d:b3:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jul 2 22:01:30 2025 GMT
Not After : Jul 3 22:01:30 2025 GMT
Subject: CN=e8120f2085b93459257a8934dc5aff4ac1661e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:b8:a7:21:cd:58:a1:d0:09:a3:2a:38:93:
7e:dc:5f:e0:62:68:b8:af:ad:9d:9a:9f:16:d3:22:
6e:01:01:98:88:de:5e:d3:a6:95:6b:27:ba:c1:a4:
33:5d:c9:63:d5:b7:e7:59:51:d5:ca:34:10:3f:1f:
48:f9:6d:0d:23:a8:86:a5:2c:d1:05:0b:f4:18:67:
5a:f6:3e:84:15:2f:86:f9:46:49:81:e2:68:f5:09:
64:5f:77:a1:10:61:21:e4:be:1f:8a:13:33:30:39:
64:33:d6:1f:cd:e1:63:32:5a:1b:f5:05:03:26:0b:
e1:f8:6e:4c:a1:27:88:64:1c:a7:f3:90:79:3b:77:
06:51:e7:51:d0:5b:47:95:fb:71:6a:e2:f4:ab:bb:
00:1a:ec:5c:72:83:6a:ae:96:32:80:af:b3:7c:06:
80:cf:75:16:3f:42:7b:a3:ae:99:cf:b0:ad:08:74:
65:69:37:03:d8:33:6a:d1:4c:b7:ce:96:e1:e2:d8:
5b:43:4b:b8:7d:d5:7e:d6:6d:1b:77:9c:5b:8f:51:
56:3d:38:e6:b2:d2:e1:a9:91:24:a2:35:c3:d0:4d:
46:95:d3:57:15:ab:a7:87:b5:2f:4f:5f:95:32:a0:
fd:2c:ff:49:5b:bd:3e:a5:4b:a2:4f:fd:8a:72:9c:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:0F:20:85:B9:34:59:25:7A:89:34:DC:5A:FF:4A:C1:66:1E:13
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:21:3d:da:ca:6a:76:73:d0:9e:84:81:95:a3:46:d7:c8:
27:2f:d0:2f:16:15:e6:dc:24:81:06:75:b3:61:44:34:a5:be:
28:92:b7:1b:a7:eb:73:8f:c9:ff:f1:f7:bb:03:f2:7b:e0:0b:
97:2c:04:90:c2:76:d3:03:f5:0c:8c:6c:16:33:81:c1:fa:f6:
3e:36:b0:bb:f5:0b:22:04:ab:1f:d4:92:15:85:85:e5:c1:04:
89:48:5b:d6:45:d2:a2:1d:39:d5:43:8e:6b:36:48:20:66:b9:
cc:b7:23:fb:d6:00:0f:a5:a5:a7:f1:2d:9f:d3:a3:df:b9:3f:
30:36:ed:6e:ae:d2:70:79:47:78:32:a6:48:62:8b:6e:45:07:
6c:c0:e5:b5:b7:9d:f5:0b:c8:33:b8:7c:a7:a6:c4:55:d8:c0:
25:54:ac:c7:98:90:e9:8d:ec:58:f0:14:58:90:8b:a1:49:66:
46:27:db:d1:f9:a2:ff:0b:29:75:07:15:92:e3:d1:87:5d:b4:
5f:85:d4:8f:45:21:a0:9c:30:ef:fd:16:c9:6f:99:3e:f7:fb:
60:20:ad:67:ed:07:85:99:df:5f:79:2d:90:4e:6e:2f:3b:12:
69:67:f2:66:a7:cd:27:b4:3c:6e:76:3d:be:c9:ba:08:aa:b7:
c5:51:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:49:27 2025 by rpki-client