Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: 1j3lHlyXPO5MG33oNtREKawGYFClfaBebMk1yPeKImM=
Subject key identifier: CE:7F:56:19:7B:53:5A:DE:32:C2:0D:C8:D0:F9:97:F4:6E:77:91:C3
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0197BAEB61E7A323EA5F42129AF6EFE62FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 09:01:17 +0000
Manifest this update: Sun 29 Jun 2025 09:01:17 +0000
Manifest next update: Mon 30 Jun 2025 09:01:17 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: Bns4jbygYrz1TMF1Ij7pkRyBYhtpiaAy38Lb3jWGDeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:61:e7:a3:23:ea:5f:42:12:9a:f6:ef:e6:2f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jun 29 09:01:17 2025 GMT
Not After : Jun 30 09:01:17 2025 GMT
Subject: CN=ce7f56197b535ade32c20dc8d0f997f46e7791c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:9a:a8:5b:ea:48:63:c1:da:1b:28:17:5b:
19:7d:d3:47:8b:21:c3:20:be:3b:2a:ab:00:66:6e:
8b:d4:fb:06:9d:8d:8c:f1:97:a5:a1:70:5a:e7:07:
f6:c9:50:2f:bc:d7:c2:8f:78:d9:3b:7d:9d:08:41:
b4:9b:0e:9f:d8:c6:ce:1d:7a:ae:99:03:92:13:c4:
ad:69:5b:63:32:b2:93:5f:16:d5:d8:21:52:1e:4c:
c1:e6:d2:d7:f2:62:5c:78:75:eb:36:23:81:29:4a:
69:de:d6:95:39:04:4a:5a:1d:7b:de:ea:da:49:40:
6e:0c:a7:a5:fd:43:23:be:60:39:16:e4:3d:67:5a:
73:cd:37:68:67:f6:09:0c:f2:a7:37:6a:e6:39:22:
6d:09:f5:5e:e8:56:4e:b5:e9:72:e4:93:74:e1:02:
39:c9:00:c2:4e:c0:56:0a:d9:a8:d6:3a:eb:3f:1c:
a4:ad:c0:f9:9d:a3:df:88:ae:59:b4:a8:de:dc:fd:
57:1c:c0:3a:1f:6a:e5:2c:7b:d2:fc:08:6a:52:30:
b2:95:ac:83:8a:03:94:49:44:97:4f:74:37:f9:c7:
fb:0b:be:34:61:5d:e7:a1:c8:6e:01:6a:e2:6e:bb:
f0:b2:dd:37:28:fd:7f:4f:8d:9c:25:7b:4e:df:8d:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:56:19:7B:53:5A:DE:32:C2:0D:C8:D0:F9:97:F4:6E:77:91:C3
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:97:00:f8:59:fb:5c:6d:55:35:5d:5c:72:ab:f7:c0:4f:
86:f2:c3:4b:48:47:d6:c7:6c:53:a1:6a:50:5e:ea:d6:fa:c3:
ae:9c:e8:1e:1f:db:b0:73:c7:52:e4:60:fb:69:ed:6e:97:ec:
5d:e2:cf:b4:77:d2:b9:72:06:40:00:68:05:f8:1e:f8:e0:5c:
46:90:ea:3a:b7:2d:ad:12:07:84:4c:aa:fc:ff:9c:39:b0:b2:
f7:71:53:cd:64:78:6e:4f:95:83:56:39:99:b5:b0:58:6e:f9:
e9:15:ff:68:26:8e:a2:96:b7:86:23:56:fd:32:96:36:30:f2:
72:60:31:f4:7b:12:78:46:2b:08:ea:0a:ca:c0:da:6c:c4:96:
1f:4b:14:4c:92:54:70:95:2d:e4:81:02:39:b8:e4:e8:46:ca:
12:63:36:2b:74:06:dd:7f:ae:68:09:51:5b:c0:b4:70:1d:6f:
3f:0e:96:72:60:3e:2d:40:69:bf:83:20:99:92:f8:a5:66:7e:
4e:b0:f3:62:23:f5:80:31:80:33:31:8a:cc:0f:23:1c:03:06:
d3:04:93:0e:40:cf:ad:06:af:59:e6:20:d2:a1:da:d8:6d:f5:
78:e0:f3:71:86:e2:0a:9d:4b:4b:b9:24:78:6b:db:b0:81:82:
af:9d:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:23:09 2025 by rpki-client