Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: UBB+vGUVXxjr51RVMmoVOyvLDrnhibEbg5dPi3nFz1s=
Subject key identifier: 51:04:85:2D:E3:19:D9:5F:09:75:1F:19:5B:33:53:E9:BE:AC:DB:2A
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01975F81C0FE4C338CC84DA4E8AB899FB3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 12A4
Signing time: Wed 11 Jun 2025 15:00:28 +0000
Manifest this update: Wed 11 Jun 2025 15:00:28 +0000
Manifest next update: Thu 12 Jun 2025 15:00:28 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: h+JD5g9r0iM4yE3HQTGiK7GmscEREzwhHQkWYQE6mrM=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:c0:fe:4c:33:8c:c8:4d:a4:e8:ab:89:9f:b3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 11 15:00:28 2025 GMT
Not After : Jun 12 15:00:28 2025 GMT
Subject: CN=5104852de319d95f09751f195b3353e9beacdb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:e4:16:4c:d3:fd:82:d1:39:34:1d:67:76:
7b:05:79:a0:0f:c6:fe:21:e3:9b:09:af:fe:5f:78:
8a:79:58:60:0e:d2:78:6b:cd:c5:00:c5:e9:5b:90:
d8:f5:93:06:5c:50:c9:40:f7:ad:f4:53:df:62:73:
6f:58:f0:55:78:1e:0f:ff:93:81:ea:9e:8b:4c:d2:
c0:b0:5b:85:7c:28:41:65:35:6a:64:bb:86:f2:c1:
20:ac:c4:7b:95:a0:7b:9a:66:9c:03:b4:e5:45:b5:
d8:17:f0:c0:24:eb:8a:dd:a2:56:a5:5b:de:d3:33:
5c:2d:b8:1f:b0:7a:c4:69:51:44:26:1d:ce:55:7e:
1e:77:28:2b:50:33:a3:b1:fb:33:3e:40:48:da:ea:
a2:c7:82:7a:51:33:32:14:e1:98:4b:ed:f3:65:1e:
91:99:d9:8a:b3:5a:25:e7:e4:c6:07:15:77:cb:56:
24:ee:d9:79:02:9f:99:38:8f:ec:f5:16:93:bc:ce:
9e:b8:fe:96:35:9c:05:7d:de:f0:5d:a1:8e:3a:62:
90:c5:43:46:9e:a8:31:8d:9a:45:7c:d7:5f:4b:50:
79:68:2a:06:e8:f3:72:f1:6b:49:8a:1f:e9:ac:5d:
91:1d:fc:8d:07:54:55:6a:31:c8:29:08:c2:7e:1d:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:85:2D:E3:19:D9:5F:09:75:1F:19:5B:33:53:E9:BE:AC:DB:2A
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:e8:8a:0b:6c:bb:b9:35:48:68:c0:a1:3a:b9:43:c3:42:
a6:08:94:e6:a9:2e:b1:d6:76:3c:f2:f5:bc:3f:e3:7c:6b:8d:
c4:2a:d6:f0:d1:e9:32:c1:c2:2b:87:af:b3:6c:94:f5:e1:4e:
ee:f8:4e:75:77:81:18:d4:a4:11:0b:47:cc:3d:b7:d7:61:3d:
05:5c:6b:cf:01:09:cb:61:87:10:9d:6d:8f:74:ee:f2:4c:b4:
44:68:5a:2b:bb:59:ab:39:f1:9d:cb:66:9f:b1:07:78:6f:03:
06:76:e5:dd:48:6b:66:ba:1f:19:49:5f:77:f5:12:25:3b:63:
9b:18:cd:23:2b:a4:3b:bd:74:bb:1d:2b:47:3d:84:b0:c1:0a:
f6:74:c1:4d:27:8e:96:d6:32:b3:81:f4:e8:80:f3:9d:2d:b0:
73:6e:f1:b5:cc:5f:df:48:60:c7:1f:5c:57:29:2b:3c:67:4c:
df:cc:bf:2f:92:cc:07:16:0e:7c:e4:39:c9:0e:ca:dd:1d:ba:
22:6e:68:27:9d:17:ea:14:d1:c2:a7:33:a0:c7:85:93:66:52:
5d:2c:84:45:bd:0e:24:25:39:a3:50:8f:1c:2c:c5:dd:4b:93:
b4:c6:80:48:75:7e:32:bc:e5:7f:f2:7d:25:2c:63:2f:33:85:
43:bf:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:57:02 2025 by rpki-client