Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: xYe87eo2Pl0NAHXbGJemTPXt+0xzS7tnzeGTFl+8Zms=
Subject key identifier: CD:78:4E:A0:84:FF:05:49:07:10:0E:35:EE:B8:35:BF:B1:D6:24:11
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 0197BA0F7A18D2317D25610FCB919B9559D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 15D8
Signing time: Sun 29 Jun 2025 05:01:05 +0000
Manifest this update: Sun 29 Jun 2025 05:01:05 +0000
Manifest next update: Mon 30 Jun 2025 05:01:05 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: TKRJ1qywfcUE/3NqXVNcvFrWMRWKNjOqfX96i2Ub4yA=)
3: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
4: fCzm3iDfGNLzSTbcoduj_jsEwe0.roa (hash: pBY7VkXWNq309M84LTxPPh1gnhuSALeJ8x7uuHmSmZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:7a:18:d2:31:7d:25:61:0f:cb:91:9b:95:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 29 05:01:05 2025 GMT
Not After : Jun 30 05:01:05 2025 GMT
Subject: CN=cd784ea084ff054907100e35eeb835bfb1d62411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:c1:d3:ef:f4:15:d6:f6:92:c6:86:ca:e3:
b5:94:0a:f2:aa:91:4a:6c:0e:74:79:da:51:bf:bb:
22:14:24:60:4b:10:2f:13:16:c7:ca:6e:34:a6:20:
4b:2c:74:5f:6c:b6:8e:00:a6:58:b7:18:03:e8:5d:
c0:ee:3a:b7:87:ad:03:5b:45:21:55:7a:5d:d6:eb:
ed:12:be:2a:8d:59:d5:ad:28:7c:62:dd:df:29:30:
df:ce:5b:5b:a1:3d:c6:62:a7:89:b1:68:ed:c1:b8:
81:9f:5d:f3:ec:21:29:24:cf:fb:41:c7:ce:c7:86:
8f:db:52:7e:77:66:aa:0b:03:9c:ac:8d:ab:90:9a:
6d:ad:73:12:a4:1f:e8:49:f9:29:c8:ed:27:62:9a:
4e:d2:c4:9a:35:b6:9e:d0:f4:89:bc:ee:e1:62:e5:
56:26:b9:46:ef:62:1d:7b:76:38:3f:09:06:23:cc:
36:8f:24:35:f4:86:30:c5:51:db:91:c6:63:8c:1f:
1b:76:f6:24:82:0f:f3:dd:5f:5a:de:d3:4b:4b:58:
7d:61:0b:6e:55:0e:a6:95:0a:7c:4d:49:bd:a2:80:
54:e7:0b:8f:ee:59:2b:88:c2:00:5a:f7:e7:3e:38:
bc:4a:de:08:ee:90:c2:90:7c:61:1e:a7:b1:d5:f6:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:4E:A0:84:FF:05:49:07:10:0E:35:EE:B8:35:BF:B1:D6:24:11
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:1c:25:97:76:81:07:98:89:ef:c3:de:35:85:ab:ef:57:
54:ff:24:7f:f9:0f:2c:4d:7d:53:02:dc:89:e9:cf:9e:95:f7:
b9:67:7b:06:bd:18:24:b9:2c:d3:f0:ab:b5:07:ff:cb:a9:07:
5e:8d:52:21:55:9b:00:ba:d9:99:f4:69:c4:af:b5:e7:db:34:
cb:9e:62:70:e6:9f:53:d7:21:38:54:52:d5:b0:04:67:5d:af:
e5:a8:bc:77:73:3e:ee:3d:3f:4c:84:46:26:62:f7:30:6d:b1:
9b:f9:52:73:b4:72:17:2a:42:a0:70:fe:06:cc:74:d2:d6:6d:
ab:37:ea:ca:ca:4e:b4:1a:4e:8c:16:7c:bd:b3:a0:9e:1f:05:
27:13:28:68:eb:64:cb:c6:fa:2e:43:47:ed:fc:31:c3:37:73:
9c:25:3b:2b:59:30:a4:7f:c2:96:d1:a6:2e:23:3c:01:e5:29:
72:96:d9:43:bb:51:cf:8b:17:8f:7f:00:1d:1e:ef:af:4b:9d:
ac:6f:7e:33:91:a8:18:49:77:93:83:93:77:30:bb:14:f0:b5:
ac:69:f9:d5:3d:e8:58:6e:28:ff:83:66:6d:03:19:90:6f:1c:
ad:6b:ba:5c:97:e8:b4:85:5d:be:88:07:31:2a:d2:26:0a:cd:
62:c0:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:46:05 2025 by rpki-client