Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: BQcmgwCHctp0U7XeKmg1Ta8lNCQZ6io7u3Nl4GIrVDI=
Subject key identifier: 97:3E:CB:92:8B:65:57:1D:36:E9:2D:E3:22:65:2B:C5:A4:D5:F1:DE
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019854FC5860EF875269DC5A0325CE2132A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0F5A
Signing time: Tue 29 Jul 2025 07:01:20 +0000
Manifest this update: Tue 29 Jul 2025 07:01:20 +0000
Manifest next update: Wed 30 Jul 2025 07:01:20 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: Zd8fqi8yvWa7hyWXWi66DjwlibMuH9s9ax5RArb2eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:58:60:ef:87:52:69:dc:5a:03:25:ce:21:32:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jul 29 07:01:20 2025 GMT
Not After : Jul 30 07:01:20 2025 GMT
Subject: CN=973ecb928b65571d36e92de322652bc5a4d5f1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:9b:0a:96:ca:76:f8:f4:1f:f7:c8:77:14:
61:40:58:54:bb:44:bf:f1:01:0e:5d:33:96:7f:6a:
2e:22:7c:7b:76:92:4a:6c:66:44:43:e7:3a:68:8c:
02:20:58:8e:06:19:82:18:64:f0:a8:f6:c4:fa:95:
36:73:57:e1:22:0d:67:85:4c:7c:d0:d0:1f:e7:c0:
cd:b8:76:da:01:cc:e0:8b:c5:f1:d3:74:0e:3a:a9:
74:82:00:77:b4:d6:8e:e0:e2:fd:73:60:c5:20:06:
99:3f:9a:7f:5f:5a:0a:16:a9:a2:b2:fd:5c:ad:3c:
cd:cd:52:b4:fc:70:3a:b3:09:50:c2:22:92:91:03:
5d:38:81:02:1a:73:77:ca:a6:c1:ec:17:16:a8:b8:
83:f0:30:e5:7c:9c:55:dd:44:c2:04:0b:58:f5:e7:
fd:38:d9:42:97:22:1a:2e:0b:73:4d:36:b0:11:00:
89:5e:51:7a:0a:53:c7:1e:b5:d1:b8:5a:89:20:87:
1e:14:a8:11:30:25:9e:3a:54:ab:14:aa:ce:d5:1d:
6d:45:24:b3:18:69:d7:68:4c:2b:b3:54:40:80:d7:
7f:9b:3c:23:30:f7:6f:d2:e3:09:46:8f:b1:e0:8e:
bf:7f:52:62:87:18:f9:12:4d:e6:51:24:d3:bb:c4:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:CB:92:8B:65:57:1D:36:E9:2D:E3:22:65:2B:C5:A4:D5:F1:DE
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:1e:fd:02:80:7a:eb:39:79:15:5c:49:e2:17:30:88:e0:
6d:2e:cf:df:9d:4f:97:1b:ef:41:cb:3c:43:5d:92:ff:7e:0c:
04:2c:44:d8:01:3d:92:f9:b5:68:df:6b:e5:f7:a6:23:62:4b:
dc:7f:27:25:c4:e5:1a:29:2a:81:1b:65:8a:2f:f1:d9:e8:d6:
22:22:08:b9:4c:5d:96:54:14:72:55:f3:23:2a:b3:46:c9:eb:
99:f3:5c:41:58:9a:5d:58:db:a4:d0:92:bb:57:95:40:df:49:
35:80:93:4a:af:83:3b:2c:2b:d2:03:70:bd:42:db:d0:9a:cd:
84:85:9e:12:41:92:e7:7d:e8:ee:35:f8:41:27:aa:6e:c0:a4:
c6:06:c1:1e:bc:d1:38:43:3c:7e:f4:8e:60:90:aa:f1:d9:9b:
30:8f:b5:f7:0a:ab:a7:b4:8f:36:f3:9f:64:60:78:cc:85:0f:
14:cb:5a:37:f4:49:3c:ac:fe:e7:ec:e9:c9:a5:94:9f:2d:75:
43:fa:05:db:87:05:0a:a1:65:7d:47:da:1d:e5:6b:f5:45:50:
d9:e2:e6:ed:32:39:07:dc:8e:7d:75:d2:a4:50:ea:c3:64:60:
66:30:46:c7:a8:c2:8b:09:c7:75:15:7d:9a:1f:58:41:4e:fd:
a4:f5:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:03 2025 by rpki-client