Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier: 3e3QlI2vWbPy2Wjtq+v83DATwARNT6ncTqLdmOBRIOA=
Subject key identifier: 33:66:C7:AA:1A:67:83:BB:25:A0:1A:21:20:9E:B3:C9:52:0D:20:99
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 0197518F5BE07AE13D4BEAF2FC98E2C8DF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 22:00:39 +0000
Manifest this update: Sun 08 Jun 2025 22:00:39 +0000
Manifest next update: Mon 09 Jun 2025 22:00:39 +0000
Files and hashes: 1: 0UPggsXGkTuuC9Xh-r7ucS0s3D4.roa (hash: BaiSknaLrtrRfkG8QbIqZETexkpP/4Cmqojn/rd3s0g=)
2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
3: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
4: w5y2MTSdQypOX17VhFunAbCXy80.roa (hash: 7ukuMQG16arqv6mqEmEuPo+qhaVPdgY1vF5Kh03tYMg=)
5: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: 84ZsyDPSHJp7Ss8rgQpLAkfmfzXWkIoJWpw82Cn19lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:5b:e0:7a:e1:3d:4b:ea:f2:fc:98:e2:c8:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Jun 8 22:00:39 2025 GMT
Not After : Jun 9 22:00:39 2025 GMT
Subject: CN=3366c7aa1a6783bb25a01a21209eb3c9520d2099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:32:af:c8:79:7a:9d:db:f5:ea:f4:01:04:
b6:a8:a8:a6:5d:c7:94:10:2e:f9:3f:b6:96:47:ec:
92:2a:56:72:2e:f1:4a:91:e3:27:15:99:1f:7d:0e:
6b:be:e2:b2:33:34:cc:8f:7e:82:e7:d1:12:7f:90:
c3:c1:20:33:ce:ab:3b:86:23:c8:5e:2f:1e:c0:15:
b8:18:f8:37:9c:2c:80:24:0b:8f:12:f6:0b:fd:5d:
7d:7d:9b:b1:f6:da:c5:bf:68:3c:db:96:bb:f2:8f:
56:fe:01:10:db:0d:8a:a5:24:a0:95:c8:69:55:bd:
f5:38:b4:71:8f:f5:dd:05:8a:a1:a6:1e:c0:05:9d:
d2:45:7e:6a:e3:4c:7f:b1:ea:2e:c4:da:5f:dc:56:
46:e9:a8:0e:ed:f4:ff:a6:3c:36:14:2c:7f:ed:9e:
32:3e:c6:30:bf:b7:fd:26:ac:4d:3a:96:39:c2:a5:
84:87:dd:d3:5a:71:8c:81:c3:42:8d:5b:39:31:95:
d2:3b:1c:1f:b8:ba:af:c5:78:d2:c8:b0:54:01:ee:
90:0b:a8:6f:c6:a1:fc:71:3e:15:f5:b1:2d:f0:1e:
10:d9:de:50:9f:1f:c7:50:ff:08:ba:43:a5:89:16:
2a:0e:c2:17:60:cb:c8:a5:16:9b:ad:ce:ab:e8:7f:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:C7:AA:1A:67:83:BB:25:A0:1A:21:20:9E:B3:C9:52:0D:20:99
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:79:0d:6d:62:f7:8d:1c:21:c0:c0:17:d0:63:e2:a3:97:a9:
b8:96:1f:ef:ed:5f:42:eb:84:08:e3:7b:db:48:e1:1b:8b:d1:
0e:80:6d:9f:44:3b:ae:c2:b8:8c:24:f0:b6:c1:64:59:f8:12:
ac:99:4c:5f:de:22:01:a3:3d:0b:b1:cc:0b:04:07:6e:1c:17:
a1:cc:79:80:ff:8b:4c:c5:2e:af:43:15:06:b1:b2:40:e2:0b:
8b:a0:24:0c:a3:c4:15:f8:15:44:cb:0b:f8:5c:64:6f:e2:95:
c3:cc:8a:c8:0f:19:3f:34:c7:e7:c6:97:aa:1b:01:cd:29:e9:
1f:f1:96:67:5a:56:e6:5e:6c:7e:36:56:2b:8a:93:bd:28:66:
c4:96:c5:85:1c:ac:c5:a3:51:da:e1:b5:30:73:bb:18:ac:ab:
0c:8d:82:a2:ab:dc:30:0f:bb:13:66:f2:44:e0:be:95:2d:8e:
ce:25:b3:37:28:d0:2c:23:8f:fe:d9:b7:e7:7f:9f:f8:7e:03:
85:92:be:c8:22:d7:73:b0:b1:ed:72:e9:87:1e:54:68:24:4e:
35:cf:47:69:49:c0:84:23:71:d3:cd:ac:bb:c3:a6:42:a3:c1:
90:7c:81:4a:0e:a7:5c:f3:67:f8:8d:d9:6a:21:04:d4:f0:95:
5e:59:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:04:52 2025 by rpki-client