Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: ovr/yXw1lUk3YSSszrajEmzm0O4JEVgWzZSoTQC0Xbo=
Subject key identifier: 92:A9:F4:6E:5D:04:D2:B6:E2:A1:29:23:0C:C1:6C:3F:9C:20:DF:2D
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 01974F6A56C078F68BACA2AA9D912ADAFDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 0308
Signing time: Sun 08 Jun 2025 12:00:58 +0000
Manifest this update: Sun 08 Jun 2025 12:00:58 +0000
Manifest next update: Mon 09 Jun 2025 12:00:58 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: +agsCOUnz79S8d5BeRZ7CkaSPYZaDZl15FxCw5NNVZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:56:c0:78:f6:8b:ac:a2:aa:9d:91:2a:da:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Jun 8 12:00:58 2025 GMT
Not After : Jun 9 12:00:58 2025 GMT
Subject: CN=92a9f46e5d04d2b6e2a129230cc16c3f9c20df2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:26:93:06:85:9f:c9:a9:23:8d:15:d4:5a:
48:e7:96:31:9a:a5:e0:a9:c5:58:ac:d2:d7:31:d0:
f2:66:d1:1f:76:62:68:07:c5:33:1c:6f:3f:db:a9:
5a:d0:58:ec:ae:92:e0:78:d6:f2:df:e4:bc:7a:56:
9e:5d:e6:a0:07:68:20:a7:4c:d4:25:f6:d4:2f:7f:
d3:58:71:9f:d3:88:e6:84:46:1f:05:1a:cb:24:7f:
2c:f5:bd:98:23:87:eb:05:00:d5:5a:73:9d:73:d5:
18:ce:17:af:97:e4:32:c2:f5:3d:91:8d:42:dc:d4:
8f:9a:43:5f:8d:c8:38:2c:c9:fa:2c:77:80:6d:53:
07:b6:6a:7c:46:fa:53:ff:12:92:10:e3:af:e5:dd:
18:bc:bf:d4:55:e9:03:4f:99:a0:a8:65:cc:9a:37:
37:ef:bc:d3:82:67:80:76:75:4d:aa:25:13:2f:02:
0d:6d:37:e6:88:51:83:fe:e8:f2:77:1a:90:e6:d2:
c8:55:fe:33:01:01:04:c8:35:fc:45:c5:d1:ef:86:
21:c1:de:f6:f1:89:f0:2a:57:22:46:00:f8:bc:ab:
5b:cc:94:c8:92:39:34:a5:3f:95:c8:1a:d9:aa:d0:
cf:f6:c1:fb:a0:ec:71:f1:18:10:47:4d:6c:4a:d6:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:F4:6E:5D:04:D2:B6:E2:A1:29:23:0C:C1:6C:3F:9C:20:DF:2D
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0e:f0:19:bc:f9:e3:7b:c9:77:c8:3c:3b:e0:87:ef:3d:41:
e0:04:43:bd:55:b3:a1:57:b0:38:4f:9f:5c:82:6d:ea:c3:32:
bd:64:dc:7a:5c:fd:6c:c6:c5:05:e4:bd:af:31:50:7d:c7:88:
b8:41:e2:ec:7c:d4:92:f4:d6:a8:e9:92:a1:9e:b3:27:81:31:
7c:51:8f:57:b7:af:31:b2:ac:59:1a:c7:25:ee:2f:8f:77:dd:
d1:e1:d1:8d:e0:9b:d5:8b:39:b7:a2:e4:b1:a0:b1:c3:ed:4d:
b2:23:b3:8c:7a:0b:cb:3d:d6:53:3a:f7:c0:4f:77:21:71:a5:
1e:15:c0:27:76:72:9b:cf:c4:f4:71:10:b0:22:7e:43:d8:0d:
e3:c4:1d:32:e2:dc:de:31:bd:4f:2a:d8:1b:36:b2:2b:a1:04:
c6:1d:ea:4c:a6:36:b4:3b:08:c8:c3:a0:53:19:5d:2b:24:13:
a4:67:37:ee:61:62:34:db:da:d8:1e:28:9a:3a:2f:85:0f:a4:
b0:1e:64:15:a2:2a:17:f8:0a:6e:da:35:0d:26:db:bb:97:b8:
ef:c9:1a:e6:f8:f7:51:24:33:13:f8:dc:af:c8:8e:6b:03:07:
b2:66:a2:d6:f6:0b:dc:99:31:8c:e7:2c:08:a8:69:78:fa:cd:
d1:e8:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:39 2025 by rpki-client