Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: rTl0gRwCq++ZjCAw+x7svb2CpyzB0psswhXFKk4x/6o=
Subject key identifier: 63:95:16:6D:14:3D:D0:0A:0B:E8:C9:6D:53:1B:0D:35:D9:D3:C3:67
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 01974D452CC191747D46987EDDF59B557C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 07BF
Signing time: Sun 08 Jun 2025 02:01:08 +0000
Manifest this update: Sun 08 Jun 2025 02:01:08 +0000
Manifest next update: Mon 09 Jun 2025 02:01:08 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: F5z1+jLwVLHwW3djYYeyoVZuiXxhtX3J0ULMjrBsCRk=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:2c:c1:91:74:7d:46:98:7e:dd:f5:9b:55:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Jun 8 02:01:08 2025 GMT
Not After : Jun 9 02:01:08 2025 GMT
Subject: CN=6395166d143dd00a0be8c96d531b0d35d9d3c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:ac:d6:df:72:f0:de:c4:62:de:16:f8:cf:
bc:7b:40:34:64:a0:f0:c9:89:2f:62:fc:ba:da:9c:
fd:70:f6:6d:a5:79:d6:e9:46:3f:bc:e9:d1:d1:a8:
b1:62:2f:2c:bd:3a:d0:f9:9d:05:af:72:61:bf:7b:
8c:28:0c:7a:ad:d2:c7:cd:7c:00:ff:0f:2e:bb:6c:
e3:4f:9f:27:c6:3c:a5:ff:f9:c1:5c:99:15:ff:d6:
bf:a8:8c:85:0e:91:b7:9e:4e:95:fc:16:53:8d:e1:
c0:e7:50:f7:f2:ad:74:98:40:90:17:64:01:61:ae:
f3:cb:9d:56:1d:43:05:86:68:4a:92:de:ea:2d:5a:
23:f0:de:74:69:6e:93:b4:3b:dd:d5:f2:97:c2:00:
60:e8:be:de:5f:60:73:42:b9:2d:3b:25:91:bc:dd:
4e:d1:fa:7c:fd:88:bd:58:89:00:85:ee:2f:eb:78:
18:e7:3e:4a:86:e9:2a:ce:b3:74:b6:d5:17:5a:b0:
17:7f:75:ab:de:7e:3a:47:12:6e:1f:43:8d:eb:33:
b7:8b:19:d3:55:7d:31:97:74:3a:dd:30:58:02:69:
e5:41:9c:df:bb:42:e4:8c:38:82:10:15:2b:70:05:
8d:94:66:68:61:b6:f3:17:ac:55:d9:31:d9:20:d4:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:16:6D:14:3D:D0:0A:0B:E8:C9:6D:53:1B:0D:35:D9:D3:C3:67
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:a2:7b:62:64:b2:48:cd:0c:8c:79:fe:72:83:f4:b6:8d:
6c:6b:3f:44:15:00:45:e3:10:65:2a:d9:5d:00:54:06:03:8a:
83:46:a0:8a:aa:9f:5a:7f:7e:1e:7f:18:e7:b6:08:34:58:ea:
2c:64:ce:ba:3b:6a:cb:c3:73:61:6d:68:22:76:3c:55:80:ff:
ec:32:74:f6:84:a4:b3:4d:33:92:4b:82:51:46:a1:91:b8:c0:
9d:9e:9d:d1:36:84:ca:b0:99:fb:3d:5f:c7:ba:bf:0b:7f:0c:
98:9d:e7:9f:ed:f8:0b:46:27:8a:40:e8:26:74:ba:a2:b7:7d:
99:13:8c:cf:94:aa:57:c2:09:02:dd:fe:b1:c5:64:9a:30:d9:
14:6e:d2:34:07:aa:8c:a4:9b:c7:4d:7a:5b:8c:e2:65:8c:5d:
d8:fd:cb:c5:3d:9a:e1:a6:24:73:99:ab:62:a6:c9:de:6a:df:
cf:b1:0a:0f:67:ea:fc:e9:12:24:98:3b:f1:45:17:b1:ab:32:
a9:68:4c:ce:04:3f:89:36:d3:77:00:28:d7:e8:c0:d6:42:23:
13:07:f8:4a:3a:10:91:ec:f0:e6:8b:53:d7:fc:13:7b:9e:ab:
53:4a:c8:df:9f:2c:95:1a:f0:c5:6a:97:2f:12:2a:6a:53:25:
c0:49:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:42 2025 by rpki-client