Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: ZOZ/bmtAOBN/HXAUfSNTgs61/6SQahl4SnqA4DviQgY=
Subject key identifier: 4B:25:DA:90:B7:37:09:F0:A3:A5:67:41:5A:11:79:CE:DE:16:90:51
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019845BF45BAC7D8954825290129D87DC683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0CE7
Signing time: Sat 26 Jul 2025 08:00:19 +0000
Manifest this update: Sat 26 Jul 2025 08:00:19 +0000
Manifest next update: Sun 27 Jul 2025 08:00:19 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: o9W8LtaI8jNeWxFuiVOy2n6VCPK4ADLNOav97RsF4gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:45:ba:c7:d8:95:48:25:29:01:29:d8:7d:c6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jul 26 08:00:19 2025 GMT
Not After : Jul 27 08:00:19 2025 GMT
Subject: CN=4b25da90b73709f0a3a567415a1179cede169051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:a8:3c:b9:1f:0f:b3:34:02:6f:8c:23:ee:
c6:09:19:94:8c:63:d4:8f:65:e7:02:5c:06:b5:03:
af:e4:1b:40:80:93:dc:89:18:9b:7b:bb:94:96:69:
8f:85:4b:bf:b6:10:d9:d8:68:65:4c:ea:9c:1a:8d:
6e:2b:c4:c3:3b:dd:2c:99:40:08:fe:d8:91:55:9e:
9c:09:ec:b3:f7:01:fc:b2:10:45:fa:10:c8:51:77:
da:46:0e:aa:68:b2:4c:f9:1f:9c:29:ba:3e:ae:9e:
ea:26:01:16:44:1d:9c:16:71:eb:c9:99:28:36:fb:
de:03:24:0b:a7:99:dc:98:79:f3:4d:34:45:10:cc:
22:e1:3d:ae:af:2c:01:e4:e7:4a:b7:ec:c8:e9:88:
fd:05:a0:a4:58:08:ba:6a:bf:e4:29:aa:42:89:f7:
77:78:b1:9d:78:c6:6b:46:54:0f:6d:80:e9:c8:2a:
22:ef:37:26:05:63:8d:2b:ff:2e:3a:75:16:b8:ad:
9b:6b:7f:f1:70:83:f1:f5:ad:21:5e:1a:1f:2c:05:
d9:0a:60:5e:e4:07:58:3c:d2:88:ba:ff:35:16:50:
fd:39:0e:a6:e5:4e:a6:7d:d8:08:41:2f:c1:3a:a1:
28:2b:60:36:02:ee:73:86:cc:ec:a9:d9:83:1a:fb:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:DA:90:B7:37:09:F0:A3:A5:67:41:5A:11:79:CE:DE:16:90:51
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:fc:72:a5:51:8b:7f:7d:b3:79:ad:fc:ce:57:1c:71:5f:
f4:84:3f:8e:41:ab:e7:e0:e7:59:1a:fa:c2:35:a8:94:11:9e:
06:e0:f5:63:de:b5:98:01:59:5e:84:03:5c:9f:9b:2f:d0:45:
a6:f4:b7:20:28:53:67:8d:fd:75:12:df:f7:81:c5:f0:67:85:
4c:27:20:cc:33:a2:a4:35:e2:04:bc:ab:e8:ab:c9:ff:21:01:
ea:f4:f7:2b:d4:ad:c8:df:14:36:7b:af:7c:1e:5b:84:72:c9:
29:cc:a7:ee:7e:12:8a:aa:1e:f6:26:78:78:72:3f:47:56:34:
4d:36:cd:4c:91:ca:63:7c:bb:16:3f:90:19:2d:7c:c9:1d:b5:
88:de:a4:89:67:a9:58:05:ca:2a:57:2f:f4:1a:af:74:97:a6:
71:84:42:bd:db:50:95:8b:67:33:84:91:ca:58:ca:a6:fc:ff:
c6:a4:aa:c1:69:5c:b1:c9:6c:d6:0a:46:98:98:1c:15:6e:2f:
69:ec:ea:9d:01:59:ea:d9:ed:a7:ea:08:3e:c6:3e:96:69:ba:
b6:76:0d:1e:f4:90:92:39:f6:63:52:69:53:c3:b1:5a:00:9f:
f8:e9:a7:55:43:fb:9b:7a:ac:10:9a:8a:9c:1a:9d:ac:17:48:
89:9f:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:13 2025 by rpki-client