Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json)
Hash identifier: 6vf4smHEgl4JqMn0qMtSYbK55QDIVUpMMwaB1tOZUk8=
Subject key identifier: 4F:B6:FB:2C:C5:5F:F8:65:69:DE:BC:66:F7:FD:88:37:86:30:86:11
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial: 01975DCA80FAE60C660C7C553B44AD960028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 07:00:41 +0000
Manifest this update: Wed 11 Jun 2025 07:00:41 +0000
Manifest next update: Thu 12 Jun 2025 07:00:41 +0000
Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=)
2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: 0ZR3zHJVpxLDxruZLPIcY8cfwd/NyJEtnD5XmUjJKpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:80:fa:e6:0c:66:0c:7c:55:3b:44:ad:96:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Validity
Not Before: Jun 11 07:00:41 2025 GMT
Not After : Jun 12 07:00:41 2025 GMT
Subject: CN=4fb6fb2cc55ff86569debc66f7fd883786308611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:46:36:f5:d0:fe:73:9e:e6:84:6c:ee:89:
1f:6b:2f:cd:84:6e:aa:db:90:d8:c0:c7:f1:15:34:
e8:01:ce:76:0f:f6:db:35:48:98:ea:4b:ca:32:33:
da:a5:60:a0:70:b3:c5:0f:c1:ec:d5:1a:87:78:58:
7c:31:6d:20:12:0a:17:f8:51:d5:ac:28:e6:c5:07:
67:a3:d5:be:8f:0c:eb:0e:ff:c4:42:a9:3b:46:76:
6c:91:7b:c9:8f:d3:33:b7:0e:96:38:c9:d7:af:b3:
d1:0e:a4:7b:da:6a:49:1a:c0:41:fb:1e:41:56:45:
4f:fa:6a:1f:15:50:19:e1:b7:18:f8:c1:40:e5:29:
bd:ee:b7:82:e3:b7:67:2a:bf:db:e8:e7:db:75:09:
95:83:ee:42:09:17:61:45:e9:68:22:ce:d3:dd:62:
d8:d6:0b:83:b5:0c:23:5e:c7:59:6a:8e:5d:7d:39:
4a:0d:29:4e:b0:26:62:04:a4:78:e5:15:21:12:0b:
e8:f8:90:11:bf:af:91:b3:1a:7c:20:91:0e:7d:99:
94:29:61:66:44:58:2d:ea:c5:b3:69:99:10:2a:8a:
69:c9:c2:9c:cb:dc:85:02:39:1a:83:1b:b8:48:86:
f2:c9:cc:5b:09:13:b7:60:cf:6f:c6:ad:08:dd:cf:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B6:FB:2C:C5:5F:F8:65:69:DE:BC:66:F7:FD:88:37:86:30:86:11
X509v3 Authority Key Identifier:
keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:be:da:48:dd:a4:87:14:8e:e6:fa:24:3d:9b:4a:87:72:
76:e3:50:af:fd:71:52:1d:ae:54:6b:a6:bc:ac:65:2e:62:86:
27:b0:a7:eb:4d:f6:35:95:71:c9:82:29:44:c9:73:fc:4e:2f:
51:2a:32:88:35:8c:5d:24:07:80:07:77:16:02:1a:cb:64:0f:
2d:f3:68:e0:55:5d:60:98:9d:e9:74:90:c2:45:32:0d:bc:95:
cb:8a:f9:75:f5:5d:e2:5f:3b:41:9f:c0:48:dd:21:55:f8:2d:
e3:7e:76:b9:95:31:26:e9:3b:fc:9f:fa:3e:3d:69:5d:dc:66:
a1:f9:0e:76:bd:5e:3d:02:d1:7f:23:22:98:35:ed:b7:cc:c1:
9d:8c:0a:a0:d5:45:57:ff:0e:88:7a:65:33:b6:a1:2e:3b:58:
f7:a7:1f:5d:1a:31:26:6c:d5:dd:47:d2:44:15:a1:3c:38:f0:
5c:91:cc:31:49:a3:31:4b:a2:4c:5f:19:3c:54:b9:a6:17:ca:
68:7a:97:97:0d:76:72:2b:81:c5:fe:60:c7:75:55:24:d9:3c:
2f:2c:aa:c7:9d:d8:76:9f:7d:17:f3:37:ac:cd:da:78:c7:e2:
d6:b8:e0:28:8a:02:0c:ab:4f:de:58:11:25:bd:99:0f:64:8c:
6e:54:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:38:17 2025 by rpki-client