Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: /Nf+8UV8tCpSCZurvaPHA1mV6Pr7uCLLqtHqMLJWyXE=
Subject key identifier: BD:94:C5:C7:FB:64:8E:C8:72:69:48:02:05:FF:5E:37:92:15:1E:70
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01976DAB88475B597CB6A0C3AC579B656D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 1256
Signing time: Sat 14 Jun 2025 09:00:47 +0000
Manifest this update: Sat 14 Jun 2025 09:00:47 +0000
Manifest next update: Sun 15 Jun 2025 09:00:47 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: NSLbdh+yFGQ4ftndgNH9fdfuPEO8xR7CYlZTB9XF13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:88:47:5b:59:7c:b6:a0:c3:ac:57:9b:65:6d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 14 09:00:47 2025 GMT
Not After : Jun 15 09:00:47 2025 GMT
Subject: CN=bd94c5c7fb648ec87269480205ff5e3792151e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:44:19:9f:13:2a:46:47:14:84:a6:90:73:
84:8c:3f:ee:ef:dd:52:75:55:b3:cb:d6:83:16:0c:
b2:c4:98:3d:2c:b8:18:23:cd:ef:44:63:a6:d5:56:
5b:66:72:85:21:21:6f:a0:8c:ed:ad:25:7f:fa:03:
de:25:e9:63:2a:6f:51:9a:16:34:24:13:41:25:e3:
70:06:a4:05:bb:ea:d9:3b:f9:f2:93:44:5f:ec:c4:
ad:e9:d5:3b:67:f0:74:4e:65:48:b6:3d:bc:d0:5d:
9e:1a:14:43:53:a0:f2:7a:2f:50:dc:1e:33:04:d7:
0b:16:8b:fa:04:39:c5:8e:ce:a5:58:28:d5:d5:bb:
19:3b:27:5b:78:dc:d3:68:fe:92:ad:9a:00:f2:ab:
ed:4d:67:b3:16:8b:dc:d7:eb:de:dd:9b:2b:17:c6:
32:06:57:53:30:71:4c:08:2b:4d:c5:ac:45:58:a3:
87:9d:bf:a3:c3:f4:34:a3:3b:d9:e8:96:30:85:4d:
8d:69:4e:d6:f1:6f:7b:89:82:69:2f:a9:db:e2:af:
51:4a:78:02:97:24:c1:f2:2d:0d:65:4b:e5:f0:89:
61:37:a8:ca:10:6e:08:21:f8:c8:42:e7:75:1e:aa:
2a:9a:1a:9a:9d:4a:a9:a0:6c:54:0c:32:f6:3f:51:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:C5:C7:FB:64:8E:C8:72:69:48:02:05:FF:5E:37:92:15:1E:70
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:af:0e:1a:d8:13:a4:5b:37:a8:fa:67:bc:33:7b:62:31:
6e:b4:5d:08:05:5d:3e:3f:90:46:c1:76:bc:6d:76:c3:e2:07:
5d:97:6d:d8:57:84:bd:1c:fc:fa:3d:35:36:49:d6:f5:b4:b3:
8e:e4:a1:82:fd:e3:94:03:29:b5:56:49:b3:ee:eb:ea:63:2c:
47:8a:9d:e7:40:1f:16:58:12:27:12:11:02:5e:d5:86:eb:a9:
1e:8a:e2:05:64:3f:cd:57:90:8d:1f:33:bd:4e:db:72:75:9c:
57:42:9b:74:73:61:cf:dd:98:37:cc:bb:4b:78:8a:97:30:46:
c7:68:75:da:01:8a:51:55:89:3f:48:69:6a:57:d2:a2:9e:c6:
37:1d:00:02:e2:2a:2a:cd:22:1e:21:3f:41:5c:eb:50:e1:ae:
df:57:f8:40:a1:6e:38:3d:8e:12:55:6e:f8:82:89:47:67:9c:
93:5d:3b:65:53:f3:b7:fc:08:18:5d:71:a9:fe:29:5c:fb:e2:
a3:d5:8a:1c:b5:08:55:55:67:25:cf:e7:47:4d:2e:05:c6:da:
58:c1:b4:ec:e0:67:85:5b:57:19:5a:e0:72:dc:c4:a3:15:66:
6b:a2:3c:20:4f:c0:dc:fe:1e:4a:5c:eb:13:8a:ab:eb:a6:f6:
70:cd:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:01 2025 by rpki-client