
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: es/TiSNt4fYI89ApGJm2mE/Y9tBzXnyrvAnW39Xbxro=
Subject key identifier: 30:D7:ED:B7:E6:AC:DC:9E:5C:35:86:E4:C8:78:20:34:46:9B:9A:C5
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 01974A43AEF31820DF8FDFACD5B96DD3F30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 12:00:39 +0000
Manifest this update: Sat 07 Jun 2025 12:00:39 +0000
Manifest next update: Sun 08 Jun 2025 12:00:39 +0000
Files and hashes: 1: PF8Dfwpieuc3szZWNlM6zxbOCaw.roa (hash: eEI5JJg+vshmiZesKoh8QcSvz/GrsPF5AtTzxYWQZk4=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: 5KVkMid/WR5Af6lCj/WIFar3/XIUMdEEbZhT+3te2fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ae:f3:18:20:df:8f:df:ac:d5:b9:6d:d3:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jun 7 12:00:39 2025 GMT
Not After : Jun 8 12:00:39 2025 GMT
Subject: CN=30d7edb7e6acdc9e5c3586e4c8782034469b9ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:6f:b6:6f:63:fc:d8:64:57:a3:07:7b:a2:
80:be:23:44:bb:a1:4b:44:00:4e:c2:63:fb:17:c6:
2e:f1:78:56:a5:75:e0:e8:07:cb:14:f6:31:a8:88:
a8:5b:98:59:5e:98:bb:85:b3:d1:36:f4:3a:1d:35:
51:14:17:c2:1f:b7:81:b7:79:32:c7:58:46:a7:45:
3a:fc:74:e2:71:b3:9f:ea:91:f3:00:83:58:69:21:
81:28:39:3e:47:29:5e:4b:1c:75:1f:75:da:05:98:
5e:0f:28:08:14:98:ac:82:22:aa:62:77:89:35:98:
77:83:22:ff:1f:cd:46:2b:5b:96:0d:72:98:61:2a:
58:23:92:8f:43:21:b7:2c:c2:05:41:db:91:15:ec:
ee:37:00:53:43:c1:bc:10:97:51:ff:16:6c:d3:ab:
a2:c8:29:d1:ba:c4:0c:d8:c9:71:d9:8a:ff:f6:a5:
71:e6:ae:c2:eb:42:44:3d:b6:c0:d0:3b:ad:3f:3e:
34:9e:85:95:9e:2b:b6:93:1b:1c:09:f8:98:9b:05:
8e:9c:6c:3d:fd:a9:42:e5:6b:2d:a8:6b:a2:36:5f:
66:0b:b9:c0:62:17:76:9c:cc:2e:37:45:f4:0d:f3:
e1:1c:30:f5:0f:95:1d:24:60:ee:96:d4:06:8e:46:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:ED:B7:E6:AC:DC:9E:5C:35:86:E4:C8:78:20:34:46:9B:9A:C5
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:c9:03:0f:78:30:0f:48:0f:a7:a3:f5:94:45:4a:57:0d:
94:74:f7:a8:ab:2b:00:14:3a:8d:41:76:5a:6e:69:c8:1b:4b:
2c:d2:21:09:23:c3:21:f0:fd:37:65:df:32:ee:9e:6f:cd:42:
e1:e0:71:06:28:dc:17:0a:90:9c:84:9b:5f:7d:ae:75:02:9d:
fc:c2:14:5e:95:e0:ff:0c:c8:b9:00:f8:d9:74:db:a5:49:27:
1a:1e:f8:ad:48:2e:f1:97:b6:aa:aa:9a:76:b7:fb:76:1f:7a:
1b:11:1b:cd:a4:0f:dc:b7:3f:b4:81:19:b2:7e:6e:88:e3:ec:
12:d9:6e:5f:a3:d6:18:95:45:ad:bb:16:2c:c1:a2:75:cb:86:
e2:c8:b9:e6:1d:c1:21:09:72:61:16:03:98:a4:5e:b4:dd:4e:
f3:ad:96:fd:a7:79:63:38:3d:bb:0d:c0:07:d0:fd:a9:ee:01:
2b:e1:8b:f0:39:74:85:3f:77:96:34:65:99:be:48:b2:71:c1:
87:5a:6b:ea:1a:7e:08:6c:2f:b5:3d:d9:31:a4:05:c3:69:ab:
cd:9a:83:0c:8b:fd:87:f0:3e:ce:15:63:e8:24:f0:de:76:7a:
c2:b8:8f:e0:59:ec:63:b5:04:69:1f:d3:e1:18:bd:94:14:13:
b7:55:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:00 2025 by rpki-client