Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: wdbZUeLMrQej5d/kYdJjCfeFuBeLRysxUYqDJcFf0AE=
Subject key identifier: D0:D7:EC:74:10:5A:B9:DA:EA:4D:9D:72:C6:C3:D9:BC:82:3E:52:D6
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019747B0FD1ED3FCCE28CBB844411F604E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 072D
Signing time: Sat 07 Jun 2025 00:01:10 +0000
Manifest this update: Sat 07 Jun 2025 00:01:10 +0000
Manifest next update: Sun 08 Jun 2025 00:01:10 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: okEfhS9PuKR4JIQPG+jhSJtaJhywZ5NmTDSyhMXiDa4=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:fd:1e:d3:fc:ce:28:cb:b8:44:41:1f:60:4e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Jun 7 00:01:10 2025 GMT
Not After : Jun 8 00:01:10 2025 GMT
Subject: CN=d0d7ec74105ab9daea4d9d72c6c3d9bc823e52d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:f2:8b:c3:d5:4f:c7:c8:f8:1a:77:d2:c8:
a2:6e:d9:d1:a4:0f:6e:a3:7b:d1:4b:64:f0:db:c0:
a1:6f:ce:8a:24:2f:04:4d:49:83:76:67:01:d4:72:
e6:f4:cc:23:b3:ff:4f:ce:24:97:11:4c:48:58:87:
b6:0b:4b:95:cf:ed:fc:87:b7:23:16:9c:85:78:03:
2b:df:c7:95:44:dd:b6:39:7d:75:56:ed:e7:bd:f2:
8b:70:9c:13:26:df:ec:cd:74:49:15:31:7b:81:72:
3c:bc:aa:4e:b7:6a:33:21:c5:97:7a:2e:ca:58:58:
eb:b2:f5:2a:62:ad:ad:10:a3:05:41:ae:44:a5:4a:
ae:d8:f5:a5:11:e4:97:f4:19:3f:6e:5d:c8:87:26:
10:fc:ae:87:94:61:9b:77:1c:00:6a:e8:0f:cb:74:
00:7e:3f:00:fe:ed:a6:ae:8d:0d:71:61:55:66:b7:
bf:1a:37:56:0c:27:03:99:3d:b3:72:cd:81:b9:ce:
b0:0f:90:d4:f4:0b:74:4d:42:42:46:ba:4d:7d:2a:
58:8d:ac:a9:3b:fd:d3:7c:08:87:30:44:8f:37:76:
92:e0:2e:f0:48:f1:80:51:cc:b1:a9:dd:81:c9:f4:
71:a1:c7:f6:05:da:ba:44:6f:fa:6c:4a:06:eb:18:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:EC:74:10:5A:B9:DA:EA:4D:9D:72:C6:C3:D9:BC:82:3E:52:D6
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5b:dc:88:a7:ca:7b:9b:a0:9d:4a:7f:37:09:3a:ac:51:1e:
1f:1d:9b:81:b7:20:e8:11:05:d4:8f:f6:4a:7b:56:f5:4c:b7:
c2:ca:0d:05:b5:f3:4a:88:5b:c6:98:22:1e:68:2a:a7:66:79:
38:40:77:14:86:5f:c8:a5:ca:ec:02:c3:99:3e:86:37:85:c7:
64:aa:d8:3f:6d:5c:76:70:ab:bd:80:7c:96:f7:da:f9:60:03:
49:ce:c1:f8:af:f5:21:8e:f6:10:b5:56:d6:84:64:62:05:14:
6c:60:aa:d1:15:0e:11:da:75:32:99:fb:76:09:90:b5:e6:83:
fd:57:db:2f:64:cd:b1:04:57:7c:23:ef:d9:be:0e:66:95:06:
ea:06:b2:2e:fe:e9:43:71:d3:91:8b:e1:2a:90:87:90:b0:9f:
bb:de:16:fd:1a:0c:5d:17:5b:95:df:fb:3b:b7:40:46:a9:96:
a7:e9:1c:33:fb:ed:df:ec:e2:33:85:b9:32:dc:31:e9:aa:33:
2a:51:5a:e4:12:ac:9a:90:cd:ff:86:95:4a:28:c6:27:d9:76:
20:e4:b3:99:1f:bc:c0:96:7b:86:78:cb:86:fd:bd:60:cc:61:
a1:15:6d:4d:90:39:49:23:35:81:b7:d6:45:f8:02:1a:7b:9e:
87:d5:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:16 2025 by rpki-client