Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: Ei2TSl1zMthIdYXpbtur/WR52UF2PwaJecp9zdqrxUQ=
Subject key identifier: BF:2B:9A:4D:C8:FB:5C:49:1D:ED:F3:5B:71:87:04:4F:95:FC:C1:E7
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 0197B9336D9FA90C3FB18DBC350EDE4563BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 15B1
Signing time: Sun 29 Jun 2025 01:00:44 +0000
Manifest this update: Sun 29 Jun 2025 01:00:44 +0000
Manifest next update: Mon 30 Jun 2025 01:00:44 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: 2J68mnRl9UIC6ExZq43OL02H7+kNzaO+V9MRSIo2Ibs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:6d:9f:a9:0c:3f:b1:8d:bc:35:0e:de:45:63:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Jun 29 01:00:44 2025 GMT
Not After : Jun 30 01:00:44 2025 GMT
Subject: CN=bf2b9a4dc8fb5c491dedf35b7187044f95fcc1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:af:95:6b:d9:1a:89:31:a7:42:fd:e8:12:
f1:02:c9:07:7d:44:b5:0b:8f:c9:56:72:35:cf:51:
a5:c3:ea:98:c5:b2:d1:c3:85:35:9d:58:9a:ba:19:
c6:5c:55:8b:0a:d0:0f:df:76:21:32:f9:30:00:5c:
67:1a:56:37:66:4e:74:a2:c0:74:ba:35:d2:8f:82:
e2:d1:53:12:26:7b:22:47:e4:b0:35:dd:16:8f:04:
cc:7e:30:4d:0e:5f:9e:84:30:41:84:44:47:80:33:
1b:75:4c:7d:37:9a:9d:52:38:4d:12:7a:90:75:24:
68:8d:9d:3e:7a:dc:f0:43:fc:fe:b8:04:6a:28:f1:
52:12:48:8c:88:55:20:64:c3:88:9b:87:83:a8:1d:
c9:16:bc:67:e7:3a:e9:60:2c:06:71:c2:34:d1:a5:
86:9f:3f:ca:8b:63:52:c4:94:40:57:22:a6:0b:87:
2a:db:65:ab:f2:61:84:8f:01:ce:bf:cb:3f:3a:91:
5a:2a:8e:8c:a2:9d:d9:61:f8:bc:e0:67:ee:fc:2f:
8d:ce:b6:9e:9e:f9:0b:7d:6c:72:56:cf:17:6d:40:
f6:ba:5d:6d:32:7c:50:c6:78:3c:e2:96:3a:22:63:
d8:28:68:05:23:5f:bb:fa:73:0f:09:73:bb:b8:cc:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:9A:4D:C8:FB:5C:49:1D:ED:F3:5B:71:87:04:4F:95:FC:C1:E7
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:80:9d:d7:72:46:d0:aa:ee:da:86:91:fb:8d:6b:1b:c1:
f3:c6:a1:b0:85:ab:f1:0a:2f:a4:d8:ac:b1:71:b6:8a:4b:a3:
4b:e2:01:24:d6:e4:d4:b3:42:53:86:f7:1f:10:95:ef:e5:0c:
b0:c3:09:f4:81:bc:20:f8:82:f2:40:31:4d:33:cb:5b:12:2d:
ce:b1:f9:fc:1d:ea:8f:e3:2d:6b:be:60:4a:44:76:e0:67:17:
99:2a:06:1a:86:47:b2:43:d2:30:e2:8c:c3:1b:07:e2:09:4a:
df:ef:18:a1:04:82:9b:71:7f:f0:13:b5:d2:84:da:64:22:4d:
09:d0:57:be:d1:1c:14:1c:25:3b:65:1e:dd:ca:66:4e:bf:5f:
93:72:62:87:77:14:84:81:19:cb:0b:c2:5e:7d:f9:c4:7b:5f:
c2:f1:b1:c1:05:76:e2:54:a6:78:c4:b0:42:6c:4b:d7:08:dc:
03:d4:05:b2:50:40:19:68:71:6b:9f:bc:07:ef:7d:f6:f0:4a:
1e:1a:cb:1e:ce:97:39:08:18:a6:2c:c6:fc:8e:d2:7e:a2:7c:
7f:22:0b:ea:93:e5:37:8d:d0:5b:02:8e:0a:51:e6:70:c9:c1:
29:d5:97:2d:98:6d:9a:b3:47:47:3f:7f:da:9e:9b:e9:e3:a4:
d9:19:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:29:48 2025 by rpki-client