Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: LNcDC2EFWaDu1o/Qh1kGctQDSC+hp2DJKq8KCYTnKEY=
Subject key identifier: 49:CD:D1:10:3E:1D:50:26:B3:61:86:9E:4F:58:67:10:CA:96:A3:8F
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 0197B7B314EB47EFCB2F89EC88E94B13C495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 03D6
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa (hash: 4pgebo0CzF4j1xyhoIwSQdxS46NhQBC6tAsYICm6rWg=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: AriER6I/sE2dnBaNul14gQ9IEVPll7sJHQNHT2RrOuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:14:eb:47:ef:cb:2f:89:ec:88:e9:4b:13:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=49cdd1103e1d5026b361869e4f586710ca96a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:1c:92:10:23:62:91:e9:b3:b9:10:ff:ce:
54:fd:c1:c1:b0:22:de:8f:95:9b:9e:e3:7e:fc:ff:
dc:3e:d5:8c:bf:e7:35:cd:12:3e:dc:23:bf:f2:ea:
d6:6c:cf:71:7b:52:ad:14:42:22:64:2b:d4:cd:b8:
af:21:eb:78:2b:46:f1:33:09:23:45:b4:ab:7b:53:
62:82:21:7d:7b:d7:2d:0c:6c:76:72:31:88:a0:59:
9e:c9:87:65:dd:6b:b0:3f:d2:a7:5a:18:b7:e7:69:
a6:ce:8d:7e:f2:44:18:07:63:dc:82:a6:85:f1:b6:
b0:fd:84:d2:94:3f:29:65:a2:59:bd:79:a2:23:3f:
93:45:95:e0:06:57:f5:eb:df:23:47:7e:9a:b4:f1:
6b:06:a4:6f:a6:53:b8:1e:8f:31:be:45:ef:f8:f1:
a5:dc:d5:d2:2e:35:83:3f:c1:77:e9:77:1a:cc:32:
fd:7d:6f:97:fa:aa:37:2b:93:b6:bb:04:c5:a8:f3:
a2:d9:2d:91:ca:8e:ee:6f:03:de:83:1e:0d:fb:bd:
94:b0:5e:41:6f:90:e0:05:2e:1e:6f:19:bf:9f:54:
c0:f3:74:4d:13:c9:fe:69:04:4d:70:26:52:73:00:
a7:9d:32:d2:13:51:36:e6:73:f9:2a:1c:a6:f9:79:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:D1:10:3E:1D:50:26:B3:61:86:9E:4F:58:67:10:CA:96:A3:8F
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:72:ab:03:0d:2f:4f:5e:9c:62:f9:22:5d:e2:e0:dd:f5:
af:b7:9a:b4:58:47:10:02:39:a9:7b:e4:93:0a:8e:39:5a:66:
e1:5b:49:e7:c5:73:06:06:4a:ed:02:63:5f:b8:1f:fc:fc:f3:
a0:0a:20:0d:b2:55:42:1a:d0:35:df:20:18:e5:fd:fb:03:c2:
65:87:90:3b:fa:57:10:c0:7d:71:a8:ca:26:9b:43:e4:43:59:
a5:f6:f2:59:c9:49:a1:99:da:76:e1:4e:c4:b6:67:4c:62:f3:
a4:cd:51:d4:48:2c:c7:a4:72:e3:75:45:cc:20:2e:2d:28:7f:
b9:cb:90:5e:16:f3:db:1d:05:f7:5e:98:56:ff:3b:87:02:fc:
47:9e:07:e0:3b:5a:f7:f5:50:e5:b4:b6:26:f1:42:09:0d:b7:
9b:bc:54:4b:64:16:c1:9c:8a:62:ed:08:a7:6b:61:3c:37:8b:
04:ac:d1:a3:82:da:bb:08:87:17:1b:66:81:6d:c7:a8:f9:8d:
a9:e4:6e:03:49:53:d1:70:be:02:21:bf:fc:5a:72:a9:26:d4:
f7:33:52:9b:33:3b:c5:13:ab:17:d4:53:30:04:e8:90:60:a4:
26:e2:d9:2a:6c:2d:67:33:1f:65:5d:5c:a6:37:f9:27:de:49:
1c:04:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client