Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: f3Qoi/nwBY9kIZy87DZE9+Y8UZoJKjjCiN6h77gt+3s=
Subject key identifier: 0A:6E:C2:8F:4E:70:C0:B2:0E:C3:F1:7A:6A:4A:EB:27:DB:57:17:8F
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 0197B7B2F2C43CDB201CEB4AE68CDD09E488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: nOZtjQniQuWq1gDgqG1orQQmlyWlEttR438c0QfSYuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f2:c4:3c:db:20:1c:eb:4a:e6:8c:dd:09:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=0a6ec28f4e70c0b20ec3f17a6a4aeb27db57178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:a0:95:89:c3:ee:e9:4c:f4:45:3f:8f:ca:
c8:96:a5:09:a5:e0:96:0e:01:b8:3b:42:4a:40:c8:
2a:a5:eb:d0:46:17:73:1a:3c:38:86:c0:90:2e:50:
2a:92:73:85:79:2b:39:34:05:75:26:a5:16:42:7c:
da:2f:36:79:35:fe:51:1f:21:4f:71:da:b0:3f:6c:
6d:f3:4a:50:ea:36:ca:9a:99:b6:d3:32:37:be:93:
4f:e9:96:72:f1:c2:db:95:19:4a:4a:08:4e:38:5c:
40:76:6d:8c:bf:12:60:28:af:4d:b7:f8:a4:54:af:
cc:76:25:2e:56:97:1f:3c:6b:15:c7:18:17:53:9d:
cf:5c:9a:21:bd:10:6d:87:6d:db:14:32:24:db:11:
da:d7:1a:9a:95:b0:af:23:9c:d5:46:0e:01:37:c2:
4b:04:71:aa:1a:0c:0c:27:c4:64:b4:af:16:9b:d8:
12:da:0c:52:d4:3d:04:04:4d:d8:e4:36:6b:d4:e5:
62:70:5d:56:77:38:53:35:a6:5e:65:22:31:58:e8:
d8:1c:36:4d:85:60:35:af:6e:52:34:f0:2e:f5:3a:
57:0d:f2:63:57:9a:b2:20:18:30:11:4a:cc:5a:00:
81:58:db:f7:8d:91:d5:ea:31:6b:b1:55:c9:ae:45:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:C2:8F:4E:70:C0:B2:0E:C3:F1:7A:6A:4A:EB:27:DB:57:17:8F
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:df:36:71:78:dc:de:b9:b4:b1:c9:c1:d5:94:ac:ca:45:be:
6a:81:f6:10:c3:c7:ab:e7:47:5a:5a:51:23:77:af:eb:61:3c:
ce:5a:30:33:95:fd:a0:52:f8:7d:f2:ec:0a:37:b3:e6:15:f9:
7b:fb:a4:8c:95:f4:9c:2c:de:5b:8d:bb:dc:23:e0:20:37:b1:
5b:ae:2b:d7:c1:fa:e6:c2:fa:0e:16:d3:05:25:f8:7b:06:da:
e4:fb:9f:57:d1:8e:17:fc:58:a6:41:ae:7a:df:12:71:d7:58:
9a:7b:24:e1:67:ad:f0:9d:01:0a:47:9b:82:75:b4:fb:a0:08:
2f:be:25:84:db:b9:48:d6:b4:05:3f:18:4c:bb:f9:d5:a8:57:
99:87:d4:14:a2:a6:86:88:01:92:bb:e8:88:73:46:41:e0:29:
fb:a1:bd:87:f5:24:f1:5b:9a:bc:0e:9d:04:d3:5a:d6:d2:88:
b5:42:5a:ec:31:48:04:19:2e:33:c4:c9:e8:75:94:59:92:31:
f5:2b:43:1d:64:50:35:ab:a3:02:87:dd:f1:53:14:60:2d:70:
cb:c0:f1:b9:d3:fc:95:27:66:5d:13:e1:f6:84:04:2f:41:6f:
b3:33:89:34:d7:37:66:f7:dc:90:36:35:81:f2:dc:69:c5:8c:
c0:12:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:49 2025 by rpki-client