Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: oJdVj8BCZAHVa5h4ns2RspT1qRNXvtBoeZkTTpus7qY=
Subject key identifier: E7:A7:D3:A7:CE:52:F2:82:FD:B2:51:78:8B:9A:86:5A:B9:3D:33:FB
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0197B82123F786CCF3C2F3518F242E298A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0B68
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: jmzAyqPwzH8KwNIFZ25QuNybgryCDcrBY0LnnhPsg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:23:f7:86:cc:f3:c2:f3:51:8f:24:2e:29:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=e7a7d3a7ce52f282fdb251788b9a865ab93d33fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:5c:34:15:bf:65:13:bd:8b:77:7b:1e:5f:
fb:43:35:5f:95:59:c2:61:0d:bb:a9:62:1c:71:05:
dd:88:85:62:bf:38:80:61:42:39:42:b5:60:12:05:
7e:5c:f5:8e:8f:01:30:71:17:3a:50:9b:c2:b6:74:
60:09:85:a1:c2:6f:6e:77:c5:a4:52:b9:91:e7:58:
f5:0e:88:3f:59:eb:8d:54:14:0c:c0:d5:76:e4:32:
53:78:f3:71:b9:c6:9f:dd:57:f9:b3:03:9b:4a:04:
74:16:d6:6c:25:90:03:ab:1d:ff:af:a0:b3:c9:b1:
81:53:b1:6e:2c:f2:69:68:99:a7:6c:28:f5:36:f6:
06:3f:1a:b5:cb:db:e7:ec:5d:1b:2e:76:66:50:61:
4f:17:f8:13:1d:8a:a3:61:d1:fc:2d:9f:72:eb:1a:
b6:d0:15:43:68:11:d2:47:09:51:46:71:35:d6:a4:
6f:7b:8e:47:1c:a2:82:6b:d9:09:66:58:83:de:5f:
67:4b:3a:de:6e:e3:e1:ac:08:fa:5b:5c:38:91:cf:
e5:be:24:c6:0b:1f:b2:fa:29:e9:70:f9:0f:d1:9e:
7e:b3:ba:fa:49:cd:a3:92:bb:1f:90:7b:cd:70:58:
1c:ac:83:9d:a5:d6:fb:b2:03:9d:af:6b:99:50:81:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:D3:A7:CE:52:F2:82:FD:B2:51:78:8B:9A:86:5A:B9:3D:33:FB
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:59:7e:cd:a1:65:22:87:a0:6f:0c:c0:43:a3:81:ea:cc:
e7:cc:42:d1:b5:c8:d4:89:1e:bc:5a:b6:4f:77:1c:05:c1:b0:
79:4f:67:30:89:07:d1:ac:11:7c:70:7f:2d:3d:36:45:66:ae:
fc:45:83:54:cd:95:92:91:60:b0:82:0f:60:58:7f:5f:d3:d3:
0a:f3:07:c8:8b:da:ca:83:5a:f7:a8:ad:97:f0:98:b9:00:d8:
1e:56:7b:af:a8:69:1e:3f:3c:b9:1d:f7:56:98:8f:d2:4e:fb:
79:11:94:6b:c0:bf:3f:75:8e:64:29:9f:e7:ef:8a:0b:92:03:
e1:54:47:66:52:7a:9a:98:2e:dc:35:22:b8:4d:eb:2f:88:18:
15:63:e0:93:6b:f0:9a:1f:bd:7c:91:df:5d:dd:f4:f1:5b:c8:
6e:bd:fd:0a:e5:a7:ac:05:98:bb:1d:6b:ce:a0:6e:3e:45:7a:
60:cc:f1:cc:80:31:f6:2f:3e:c7:93:53:3d:c5:67:f5:ac:05:
0e:e0:b2:13:56:5a:bd:43:c1:fc:43:77:77:6a:a3:6e:5f:cf:
a9:d2:83:ff:f7:cb:6b:49:f9:9a:4c:68:1f:57:e5:55:a5:b7:
b4:b4:69:d8:92:ed:3e:23:fd:a4:68:6a:b6:f2:3f:c0:5c:84:
3e:2b:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:50 2025 by rpki-client