Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: 3HoHZQbhc1ljuP9TDsu0Vd1O2xk6SAPVRPu9Ph6HVUE=
Subject key identifier: 22:1C:4D:C4:AE:A5:19:90:A0:0B:65:01:62:B9:03:4B:B5:85:CC:9A
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 01974DB2BF1E0FF0F0B386E34FD983D7ED37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 12B6
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: WGOJKKQ//skwn/anFv4i9niiBsGDUlzIq/ytHpCIDE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:bf:1e:0f:f0:f0:b3:86:e3:4f:d9:83:d7:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=221c4dc4aea51990a00b650162b9034bb585cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:13:b6:fb:96:51:ad:14:6b:79:bf:29:2d:
8c:10:d9:bb:78:fd:ad:41:67:5c:9c:e3:ed:59:7e:
e6:40:f8:30:a5:38:4d:a0:5b:eb:be:4a:2f:22:ba:
0b:a3:25:4a:b1:ae:8b:e4:a9:6f:28:b9:f5:20:a9:
2e:d5:29:f5:ba:a9:47:c0:b1:4b:de:30:9e:71:35:
71:32:d0:7b:1c:ce:ee:52:e5:a4:0d:c5:18:52:29:
c8:7a:24:55:84:fb:da:c7:02:db:d3:3d:97:c6:11:
cb:f1:4c:e2:83:60:71:1d:47:ca:4f:1a:ec:3b:0b:
e1:01:1d:1c:85:5c:e8:03:81:09:be:69:b3:90:ce:
0b:35:b7:ca:ae:00:22:e8:65:dd:94:f8:3c:c6:8c:
5c:04:2e:58:a2:1a:47:4f:01:66:85:4f:3f:13:ba:
33:7d:ff:97:8f:0c:28:6d:72:59:08:c0:d8:6e:2a:
ff:38:f6:9f:e1:23:b7:9b:c9:f0:53:51:c3:b6:2a:
15:b5:59:ff:a6:6e:67:c5:8c:43:e4:fe:81:9f:b9:
ad:14:7d:4e:52:d7:62:bf:c6:57:d3:bb:31:e6:20:
8a:4e:06:1f:f5:32:1d:14:6c:4a:e6:0a:d4:3a:24:
08:f4:23:b7:87:5a:02:b7:60:58:38:43:52:a2:b6:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:4D:C4:AE:A5:19:90:A0:0B:65:01:62:B9:03:4B:B5:85:CC:9A
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:e1:cd:be:19:3a:0c:1b:e7:37:cc:d5:af:5c:55:3e:85:
a3:3a:ad:d5:3b:35:f8:f2:53:72:70:35:8f:fd:78:ad:01:67:
67:be:4b:8e:93:39:68:05:9d:2e:a9:6f:20:51:2d:43:5d:ac:
ae:1b:48:7e:6a:fc:9a:28:2b:62:b7:ea:b3:8a:82:33:d9:66:
3d:fa:9c:c3:9f:ef:f6:c4:42:33:ac:54:c6:9f:5a:cc:02:cf:
27:d6:75:90:94:9b:c0:9a:9a:0a:a7:81:c2:ec:37:86:7e:e2:
0c:79:64:9e:34:9a:75:7e:12:38:d3:3b:c5:fa:88:8c:e6:c0:
00:c9:f7:21:92:37:85:9e:56:43:42:4b:e2:d0:fc:b0:96:4e:
cf:ef:36:51:5e:9d:66:dc:48:9b:b9:2b:97:ba:52:32:1e:86:
f3:94:35:94:be:80:bc:18:94:b9:d8:27:dd:74:15:cf:6e:7b:
65:48:a0:a9:6f:f8:f2:82:47:76:92:08:15:0f:24:53:95:f4:
9e:f0:33:a3:0a:70:ce:e5:88:18:f6:15:ee:92:4c:7d:42:1d:
9a:0b:1c:1e:b6:68:75:a5:c6:b3:dc:31:ef:a7:6e:9c:c3:65:
b5:cf:15:0e:81:18:1d:53:c1:f1:e8:35:c3:b6:d3:56:7c:d8:
93:a7:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:40 2025 by rpki-client