Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: LUqZDoUa1UwciyK+LDGn3a2o7BfNR4hvJO/fP2Urxs4=
Subject key identifier: 55:C5:F2:20:72:BE:43:19:5F:A7:72:FF:1B:AF:1C:91:76:77:62:84
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 0197B821181979146C0DEE99AC5C5E246973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 1139
Signing time: Sat 28 Jun 2025 20:01:05 +0000
Manifest this update: Sat 28 Jun 2025 20:01:05 +0000
Manifest next update: Sun 29 Jun 2025 20:01:05 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: UlKntaWWP+AslGxqASEXf66m0iI725S9LhHkPbxQo5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:18:19:79:14:6c:0d:ee:99:ac:5c:5e:24:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Jun 28 20:01:05 2025 GMT
Not After : Jun 29 20:01:05 2025 GMT
Subject: CN=55c5f22072be43195fa772ff1baf1c9176776284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:7e:f4:5c:79:4a:80:b5:75:a5:33:b2:af:
96:f5:2a:ba:b4:8c:69:aa:b3:8f:59:b1:73:85:b0:
22:95:ea:d8:33:f2:7b:46:ff:51:d5:14:4a:22:ab:
a2:ba:1e:a6:85:c5:27:b5:8a:20:37:55:83:43:e5:
37:1c:c8:f4:ca:9d:51:2b:be:6c:5f:bc:70:92:54:
9f:38:84:43:9a:13:92:7d:c5:9a:5a:38:4f:53:38:
96:39:b0:6d:a9:2c:b6:00:76:6d:81:a8:46:cb:6f:
eb:80:d4:d8:57:c7:a0:18:a6:69:05:ea:d0:2a:36:
27:74:d1:0a:9a:3b:4e:43:cd:d9:ef:d1:43:17:f9:
c5:98:7f:ff:ce:fe:ae:96:e4:17:df:47:fe:f3:d6:
40:30:51:6b:71:0e:72:f1:ee:1b:87:54:d3:8d:4a:
68:c6:ee:01:81:98:dc:7d:78:c5:65:fd:4c:2e:9b:
5c:32:4b:44:1b:ab:1e:69:cc:d4:e4:82:a8:73:b8:
0f:e5:3f:c7:8a:5c:bf:7a:cc:6d:40:a2:9b:6a:61:
2a:d8:0c:44:91:e8:0d:fc:8f:5d:59:14:a1:9c:c8:
ed:f5:c2:88:b2:bd:c2:31:5f:51:65:5d:f6:ce:04:
da:82:43:4c:7b:0b:5d:54:7e:d6:2f:d2:64:d1:6e:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:F2:20:72:BE:43:19:5F:A7:72:FF:1B:AF:1C:91:76:77:62:84
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c7:21:c8:c9:fa:cd:04:5b:93:d5:ee:72:70:1a:ea:1a:21:
50:70:b7:d5:a0:a0:26:64:f7:1d:70:0e:d3:c1:37:62:92:c1:
f1:04:c3:3b:05:6a:8b:03:2b:41:02:fc:7d:26:1b:32:b5:5a:
8b:5b:a7:e5:7f:5d:67:82:3a:2d:d3:d7:44:d9:c7:98:4c:0f:
a8:8e:ba:fa:28:46:19:9d:30:8b:75:41:32:09:99:e7:b8:37:
33:4a:e9:9f:e1:e4:d8:39:b3:e1:b2:40:bb:0a:87:96:c0:bd:
ea:d7:32:95:d1:22:05:b7:d5:ee:f7:0f:35:9b:bd:0d:36:d6:
89:6b:6f:5a:c4:9a:50:3e:fc:b2:71:9b:2b:0c:12:90:fa:d0:
84:58:e5:0c:d2:49:89:03:10:2e:40:8c:99:a1:ff:b7:42:62:
24:7a:df:10:9d:46:7b:92:81:00:14:21:5e:ce:b5:e0:cb:66:
c5:3c:2f:ef:cf:6c:5b:bf:fd:c0:4b:e9:0c:dd:27:1b:9e:58:
8a:d6:f5:6e:24:81:fe:6e:a5:94:87:45:55:8c:82:1b:44:05:
59:59:c9:dd:6c:96:7b:46:70:a9:87:7d:87:61:71:cc:46:6a:
dd:a0:03:d6:cc:72:b8:38:4b:3e:8a:d6:e4:aa:55:5c:78:d2:
e9:e7:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:16 2025 by rpki-client