Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: eKZSmV8S6lwsb6buaJqynyTZM9svVy8P7ot18D1I5rQ=
Subject key identifier: 25:F2:B6:3F:8C:9D:84:28:14:93:0F:01:BA:B5:22:78:15:19:37:7E
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019752A28489F7E0B93BBFFE9CDA00AFF87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 03:01:11 +0000
Manifest this update: Mon 09 Jun 2025 03:01:11 +0000
Manifest next update: Tue 10 Jun 2025 03:01:11 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: cV759YZtdyJhiHab/YJiTKCm6/oH543TdCjSv/VygpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:84:89:f7:e0:b9:3b:bf:fe:9c:da:00:af:f8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 9 03:01:11 2025 GMT
Not After : Jun 10 03:01:11 2025 GMT
Subject: CN=25f2b63f8c9d842814930f01bab522781519377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:59:6d:81:c1:d2:d7:53:26:9f:4b:d0:6b:
30:f3:d1:e7:79:e9:a4:ef:6d:12:69:19:d2:69:fd:
51:75:7e:60:85:48:ea:3d:c7:f7:31:4b:64:4b:56:
cc:d3:f5:ba:aa:bc:f4:43:75:52:b5:a6:bf:1b:7f:
ae:17:94:06:d1:17:9f:41:1a:ec:fa:89:13:33:dc:
8c:3b:6a:f7:16:a6:7f:37:b4:82:ed:2b:63:3e:5f:
b4:f6:2e:bf:ad:40:cf:ff:f5:6a:c1:55:16:05:4e:
78:b1:43:ff:06:97:ef:98:37:89:e3:bd:ed:58:02:
10:50:28:8a:1c:39:1b:53:a9:5f:66:0d:8c:01:8d:
ea:00:ac:df:05:c3:71:76:56:a9:b4:44:c6:1c:9a:
ca:e0:d9:71:60:99:fc:18:5d:57:71:de:04:08:a9:
1d:8b:f6:75:77:9d:40:09:f6:cc:09:35:16:e6:9f:
63:ba:1b:2c:4f:90:5b:26:4b:76:e5:9c:93:b4:bd:
c8:1a:ba:2e:78:eb:78:07:2c:5e:b2:23:bf:55:6a:
74:f2:cd:c3:e6:1d:5a:cf:15:60:08:49:30:2a:b1:
14:a8:3b:04:84:1a:97:4a:3c:a8:12:d7:20:0d:a7:
eb:98:be:a9:84:ff:e9:e2:28:24:d9:6a:af:a7:76:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:B6:3F:8C:9D:84:28:14:93:0F:01:BA:B5:22:78:15:19:37:7E
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e0:0f:68:3f:f2:49:f0:51:7b:91:19:a7:41:89:48:2a:79:
55:aa:6b:3c:f1:6c:2d:e6:df:e2:9a:ae:d1:53:4a:b8:58:eb:
0f:aa:82:7c:33:d0:33:92:d8:38:91:96:e2:95:d3:6b:60:14:
6a:31:13:a1:1e:b0:d2:fd:7a:25:7b:b3:3a:c5:7b:69:fe:a0:
8d:31:af:31:0e:6f:8b:c1:38:09:26:df:96:0f:d9:25:5d:28:
bf:54:85:73:0a:0c:83:84:5e:a9:50:d1:8c:f6:8f:18:e9:e8:
46:dc:7b:28:9d:8f:2c:76:cf:97:4b:05:d7:42:ce:d0:f0:8b:
50:98:9d:62:ff:27:96:be:13:f5:12:0a:7a:f6:6a:e0:17:2c:
b3:80:4d:d0:e8:05:58:9d:7b:dd:4b:f8:e6:35:c7:a6:22:3f:
8a:8f:8d:5e:e1:43:30:76:61:9f:b7:54:46:76:08:5e:46:8a:
e0:d4:cb:2a:f1:51:65:aa:28:8e:47:94:03:00:e8:65:d1:85:
7a:51:97:44:cd:b0:e7:31:ed:0f:f5:7b:b3:ef:9f:a6:b8:f3:
ae:1e:b2:62:36:81:ea:58:fd:9a:62:0d:66:d8:44:c4:7c:06:
f1:45:7d:eb:10:38:79:f5:3b:fe:bf:8b:28:ff:c2:ae:bb:79:
3a:27:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:52 2025 by rpki-client