Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: 7r5XLQpDj+jDyc5XAlUA1EJZnwHze99pYKWvk5lfQAE=
Subject key identifier: E9:D5:2E:00:9B:B7:9D:12:CC:C8:83:08:17:9C:7B:C6:86:0D:50:A1
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019762B9F1434917416DCDFCC6ED1345CDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1049
Signing time: Thu 12 Jun 2025 06:00:42 +0000
Manifest this update: Thu 12 Jun 2025 06:00:42 +0000
Manifest next update: Fri 13 Jun 2025 06:00:42 +0000
Files and hashes: 1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: XEsD8I6zvLKLVzbDiQXSYU+3+TXLic0JO3z7F8uZLt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:b9:f1:43:49:17:41:6d:cd:fc:c6:ed:13:45:cd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Jun 12 06:00:42 2025 GMT
Not After : Jun 13 06:00:42 2025 GMT
Subject: CN=e9d52e009bb79d12ccc88308179c7bc6860d50a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:33:0b:71:52:34:7d:3e:d7:9b:67:5d:3b:
04:dd:80:98:06:66:77:47:5c:d4:3c:c4:fd:45:aa:
7a:46:22:df:26:7c:e3:06:39:d2:4d:15:d2:96:3f:
40:d5:da:e1:08:ca:b5:4f:f2:a0:74:5d:f7:2f:33:
0e:53:40:12:8c:8f:5c:a7:b0:ea:0d:07:e1:11:8e:
48:0b:6b:8c:bc:7e:6e:32:57:68:2b:02:2e:9e:d2:
c5:66:5e:34:d1:5e:69:34:99:77:ed:f1:7f:de:60:
fe:3a:ea:c6:d4:7c:5f:b3:df:97:23:73:d8:47:bb:
38:69:3d:55:4f:c5:8b:c7:7c:7c:fd:a0:6c:28:28:
73:6f:2c:18:16:e6:5c:a2:0d:d7:1e:e2:81:90:c1:
33:8a:6d:76:00:c4:3c:78:47:14:7c:08:1a:89:f4:
99:df:18:72:cf:71:99:df:8b:fc:c2:00:c3:e4:c9:
24:6d:26:19:ca:48:c2:6a:9e:ec:04:90:76:0c:3c:
7e:a9:7d:af:00:36:96:32:4f:bc:2e:3b:44:0d:19:
e2:07:e2:dd:da:7d:9c:d4:49:3f:db:f0:ca:50:89:
db:c4:03:c5:d7:f2:05:98:3f:b3:50:04:ce:6b:24:
d4:81:40:7c:5c:16:eb:a1:5a:3c:2c:a1:2d:4e:db:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:2E:00:9B:B7:9D:12:CC:C8:83:08:17:9C:7B:C6:86:0D:50:A1
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:6d:50:31:f8:21:a4:3b:27:0e:1a:5c:de:66:99:98:b1:
aa:19:03:d5:5f:1b:bb:44:bc:aa:3f:1c:31:3b:dc:65:5c:02:
1c:ca:fe:56:87:17:7d:5c:48:18:40:11:15:c8:d8:8d:4c:74:
3f:a4:95:2d:f5:f1:29:97:f9:d1:e6:b5:75:31:66:29:71:2e:
fe:fe:d1:0e:d9:a5:95:56:f1:a2:25:d2:6f:d8:8e:1d:09:ec:
17:cb:02:d2:91:7f:16:f4:fd:48:e1:45:af:1b:ec:98:a4:39:
ac:8c:83:18:5a:bc:97:91:9b:94:a7:4d:da:55:2d:fc:e0:e6:
de:c5:76:b9:fa:42:3b:15:7e:43:39:52:a8:29:92:51:2a:9a:
58:bd:93:d2:22:30:56:44:3b:d3:61:34:f9:0a:78:13:a4:83:
f7:1e:7c:96:fc:f7:85:26:ad:9a:75:d3:db:d2:b0:23:e7:b6:
8a:c6:b8:d4:d5:1a:7c:02:8b:fc:19:bb:2f:35:f5:e7:a0:83:
57:38:9d:f1:ea:b2:f9:69:2d:e3:b7:a0:72:36:2d:99:90:73:
b4:ea:af:32:85:3b:c7:8e:63:61:c3:10:5a:9a:f6:bf:ec:5b:
0d:f0:b0:4c:8c:50:23:0a:c9:c9:0f:07:c4:91:7d:27:62:82:
a9:3c:28:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:42:27 2025 by rpki-client