Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: 6SopzonR9aHF/+kTqmQFx5zjMGWc1GQ+OsLocU4SlAA=
Subject key identifier: 58:4B:B1:36:14:C4:B2:67:C1:BA:0B:5A:C9:77:F5:D4:7B:FC:EE:97
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 01974D0DB9ABA3D0FDB66AFABD74B69B85ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 0641
Signing time: Sun 08 Jun 2025 01:00:34 +0000
Manifest this update: Sun 08 Jun 2025 01:00:34 +0000
Manifest next update: Mon 09 Jun 2025 01:00:34 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: zYoeJcsL9NKacrd6GJqOAo2KOhpGS0vXuigAPjgvH30=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b9:ab:a3:d0:fd:b6:6a:fa:bd:74:b6:9b:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Jun 8 01:00:34 2025 GMT
Not After : Jun 9 01:00:34 2025 GMT
Subject: CN=584bb13614c4b267c1ba0b5ac977f5d47bfcee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:9f:db:e3:19:0b:ef:b4:b1:56:25:0f:0a:
71:8e:31:45:cc:f4:f1:98:54:7c:24:c6:b1:11:d7:
ea:05:ed:8b:dc:78:b1:32:1e:45:fd:f1:60:5b:e6:
99:9c:91:ae:77:ba:e5:d6:d5:6b:59:32:ef:ca:64:
e6:b7:af:41:a8:c8:f2:d8:08:dc:b0:0d:df:a3:83:
cd:1f:61:47:3e:bb:92:2b:98:33:00:4b:50:2e:e4:
fb:81:94:1d:3a:94:03:c9:1e:4e:38:28:0a:63:d0:
70:14:5f:18:a0:70:ce:cd:93:6d:be:ba:51:61:d4:
01:a9:8a:a5:48:2e:d7:27:14:15:be:bb:9a:95:55:
7f:a1:d3:0c:c1:2d:3e:47:8a:23:ec:07:5e:62:32:
82:2b:b1:15:59:98:a1:05:f7:9e:db:21:6c:bc:da:
db:2a:43:7c:d0:59:36:f3:ff:b4:ed:3c:be:cb:9d:
d1:b3:31:94:b5:52:e6:37:af:39:e3:3e:08:b4:d3:
61:bc:bc:db:8d:ce:87:cc:87:5d:79:6f:1e:87:97:
64:bf:c1:a4:4c:98:7d:23:48:1a:c2:f3:66:b5:06:
db:54:97:e4:e8:4d:a7:22:8b:fb:68:43:08:9b:40:
06:0d:6f:78:c3:7e:d5:6a:52:c5:c8:b5:e3:e7:01:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:B1:36:14:C4:B2:67:C1:BA:0B:5A:C9:77:F5:D4:7B:FC:EE:97
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:97:56:ee:39:93:64:0a:ca:39:2c:95:2d:3f:a5:c8:45:
c6:1c:89:1d:28:14:58:38:e7:2a:76:72:af:ee:1f:4a:85:01:
81:df:28:99:31:e7:91:a0:be:9d:e9:6a:83:81:7f:81:55:2a:
9c:93:53:5c:3f:fc:12:21:c7:30:3b:0d:fc:b9:52:ce:c4:4f:
cf:c0:d8:b9:1d:7c:e3:a1:01:8a:b7:07:d0:10:91:d4:bc:cf:
87:83:0b:0d:a5:1f:cf:e6:04:65:8e:29:5e:db:42:b9:d0:64:
89:96:c4:7a:9f:03:5b:d8:a2:7b:61:fb:a6:f1:85:68:4f:73:
f4:a2:f3:0b:11:d1:a7:a3:d5:29:24:c0:c6:76:39:92:bb:e7:
6b:e0:1b:2a:9e:86:0c:60:cc:ff:c3:9a:9e:d7:af:70:57:46:
ee:ef:9e:5c:59:26:8b:31:ad:2a:b8:3f:52:6f:d6:69:8a:cf:
60:52:fa:d0:e4:93:b9:ea:9a:e7:3e:2d:c9:57:d1:17:ba:80:
f5:55:64:01:25:24:ac:21:9a:ab:c6:9d:6a:93:50:32:cc:e6:
2d:92:40:80:43:4f:c0:9b:16:a8:c8:ef:8a:06:7d:f9:a7:ba:
eb:6d:cc:48:0d:a3:4f:37:26:18:7b:8e:86:a3:d3:74:72:64:
b2:b6:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:54 2025 by rpki-client