Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: zJLhxh9xRLdPHkPfL8Uds82FWfb85u+bV+U1j0V3LhA=
Subject key identifier: AC:31:D4:76:84:0A:A2:91:21:B8:08:78:73:6B:FF:6D:78:22:16:E6
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01974A7A8F73DB90DFA9E6A806FB4166D1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 089F
Signing time: Sat 07 Jun 2025 13:00:35 +0000
Manifest this update: Sat 07 Jun 2025 13:00:35 +0000
Manifest next update: Sun 08 Jun 2025 13:00:35 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: 0S1OOtcg3WvzcYagrFmCD8xnKvQr3tCQoScJC+OGFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8f:73:db:90:df:a9:e6:a8:06:fb:41:66:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jun 7 13:00:35 2025 GMT
Not After : Jun 8 13:00:35 2025 GMT
Subject: CN=ac31d476840aa29121b80878736bff6d782216e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:c5:c6:b8:dc:f9:ce:c8:42:90:e1:f0:c5:
c6:4d:c3:69:28:70:f5:a7:0d:98:ae:57:be:80:f5:
dd:f1:ae:a1:d0:1b:2a:d7:26:24:8f:5d:18:c3:41:
44:9e:97:a7:f5:60:8a:71:07:f7:cb:39:8d:26:60:
85:6d:6d:d2:e8:7c:ae:10:e2:cc:24:7c:54:a0:2a:
c1:3e:90:4f:7a:54:c9:82:dc:49:61:22:31:7b:15:
bf:86:33:e6:2a:b9:05:07:b3:2d:a8:e3:8b:41:ee:
de:33:7e:9e:f2:ba:14:da:ac:9b:5f:cf:47:46:42:
a9:ca:3d:19:0d:99:93:04:b0:52:b0:34:43:ea:2a:
9e:0c:86:77:58:a8:4f:98:eb:d2:86:c6:d1:1c:ad:
0e:67:2f:ed:0a:35:1a:2c:9b:b3:3d:70:70:6a:5c:
62:ca:72:f8:6b:11:b1:6b:55:f7:72:b4:2e:90:8c:
0d:18:a0:ea:69:cd:e9:e1:a4:07:54:82:ee:e2:a6:
e7:fb:71:1e:a6:56:d8:d0:06:9a:1d:6b:48:e6:4f:
25:63:1b:04:52:52:85:03:fb:6b:ac:e3:62:fb:16:
bb:4d:64:54:b7:76:cc:5d:70:a5:4d:37:ac:16:b8:
16:a9:a9:5a:9e:bb:cf:fa:b3:20:de:85:1b:63:0f:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:D4:76:84:0A:A2:91:21:B8:08:78:73:6B:FF:6D:78:22:16:E6
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:95:e2:1a:97:fb:e8:c2:da:e1:d2:04:bc:84:42:0b:c2:94:
91:ba:70:bd:e5:a3:b0:c7:8e:c0:40:71:c8:5f:2b:20:2a:2c:
c2:94:fb:2b:b9:df:9a:ac:3d:19:75:1e:95:00:07:f7:44:2d:
3c:6a:53:4b:b0:dd:b5:c8:45:0a:eb:5b:7a:d7:57:8f:9f:b4:
5b:cc:ac:4e:29:a7:63:3e:d5:04:07:e1:31:80:8f:c5:73:61:
13:a9:db:2d:74:48:69:bc:0d:21:91:f7:0b:92:bf:d9:45:a2:
2d:a2:e6:b1:07:3d:eb:2a:4c:7a:82:ad:83:4e:9b:d9:8d:c2:
21:13:25:b3:2b:3f:a7:70:ce:17:1c:5d:28:30:21:ba:83:86:
dd:85:08:b8:5b:d4:b6:b4:2e:d5:c8:bd:95:cf:41:0f:f5:8e:
d3:b5:1d:82:eb:66:ea:01:71:a4:a2:57:10:0b:a7:58:a4:01:
98:70:66:e6:57:65:4e:94:de:41:42:c7:9a:9b:1c:58:32:41:
8e:76:45:e3:ab:0d:63:ce:b7:f8:7c:a2:f2:de:99:f3:1b:32:
d8:33:19:bb:5d:7d:3c:2d:ca:df:f2:6a:48:d4:8f:cd:17:e2:
51:73:8e:6a:0e:8b:c6:94:47:57:64:a0:83:11:03:b0:c9:b0:
53:08:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:54 2025 by rpki-client