Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: sedTAnXmWvNgjstrRTpcxC1ucvYGdPS+IhX89UabLf4=
Subject key identifier: EC:B5:EA:62:84:30:21:C7:AB:F4:45:B8:91:97:08:E6:16:D6:0C:1C
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 0197B70E8D9698B741B2800CE9132EC8270C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 1589
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: R690jR8o/3G0vOjpQOKgeTwvysUheNrknYqAOj2wMDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8d:96:98:b7:41:b2:80:0c:e9:13:2e:c8:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=ecb5ea62843021c7abf445b8919708e616d60c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:94:28:52:86:98:58:45:e0:a3:91:8d:cf:
ad:b8:d8:25:a7:a1:29:76:ce:e0:c8:e8:cd:05:3f:
6f:ea:95:9f:b9:53:83:cd:89:3f:0b:ba:98:7a:d1:
38:1c:78:cf:40:83:e0:97:c4:e3:a5:4e:0b:40:0b:
82:30:90:35:89:37:5b:55:1d:43:1a:44:28:38:41:
de:75:73:e8:40:fb:7d:e0:45:6e:aa:df:69:dc:a5:
3e:71:b9:33:80:bb:22:77:db:d4:80:57:af:e4:8c:
a0:11:ca:db:d8:e3:b5:ef:3c:70:c7:18:dd:13:f3:
ea:08:17:c6:49:51:aa:50:7a:19:e8:bd:02:2c:48:
d7:2d:19:18:24:e7:81:86:69:45:d5:ea:57:cc:dd:
8d:b7:01:df:27:83:47:1c:e1:15:3c:7f:bb:a0:73:
a1:5f:84:35:89:c1:76:02:06:d9:f2:75:6b:e9:5e:
61:9e:56:37:2a:40:65:18:0c:08:b2:aa:20:22:5e:
1e:c0:c9:0d:14:35:2b:99:7f:fe:71:53:d8:75:03:
86:13:00:ea:35:38:d7:47:8b:8e:42:12:58:19:33:
74:50:70:12:ac:6b:c6:be:bc:55:a8:07:8e:a6:56:
c9:3e:4a:67:88:b1:96:a0:2a:73:48:e0:2b:44:ac:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B5:EA:62:84:30:21:C7:AB:F4:45:B8:91:97:08:E6:16:D6:0C:1C
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:7b:16:a4:6f:02:22:3a:f7:07:da:de:2a:fc:da:ba:a2:
43:bb:76:8d:59:9e:f6:94:c3:64:28:be:1c:bf:4f:29:e3:42:
15:08:ae:1f:15:15:48:e0:33:8d:5b:0e:6d:34:56:6d:39:2e:
75:13:b6:30:42:f4:1a:0a:a0:36:15:f7:ce:a5:08:47:75:51:
45:ce:53:f3:5c:7b:a8:fd:9d:9d:b4:f6:b5:3c:e8:a3:2b:4b:
23:c1:9b:ab:0e:08:3e:d6:58:b7:86:16:7c:1e:57:dc:bb:7a:
62:f8:cd:21:d2:c0:38:f3:af:f3:ea:5f:95:65:ce:53:78:49:
11:ed:ae:a2:01:ce:31:38:b0:25:37:65:79:66:9d:67:67:71:
c5:23:70:ef:c5:bc:69:07:42:24:57:77:e0:16:9f:be:89:3e:
0d:44:35:ff:c6:76:c7:38:fc:8d:fd:67:ad:57:13:fe:db:d8:
2b:81:f4:eb:80:96:b2:65:ef:6c:94:5a:19:80:00:d2:96:e4:
b1:0c:3b:2f:cc:ff:a1:6d:bc:c1:c9:87:eb:90:ec:6e:1b:62:
3e:63:32:64:8b:4e:e6:ae:bd:a4:63:bb:7b:af:ce:49:04:67:
0f:52:ba:a5:b7:ea:41:8b:7f:95:0b:70:89:0b:88:51:13:9c:
73:14:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:11 2025 by rpki-client