Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: Lnttd+qjxqIF8Tea0/nx3M1Tm3F0h+GhHs1CzHtDlq4=
Subject key identifier: E1:66:12:A6:68:33:CA:A7:41:C7:B4:68:C9:BA:5A:EC:B5:04:F3:81
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 019748FA2863D0083697653A32FBA039DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 0A2A
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: h4a+nBoGNE9mbKezmmzKoR/KysYgW1mwdBEzP3imuUU=)
3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
4: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:28:63:d0:08:36:97:65:3a:32:fb:a0:39:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=e16612a66833caa741c7b468c9ba5aecb504f381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:07:c5:1e:ea:e2:ca:fb:bb:26:4d:8b:ca:
94:c4:7b:26:9c:b2:68:d2:05:bd:a9:39:4f:d0:1b:
ba:af:d6:26:08:01:0c:9e:48:0e:e6:f5:3f:91:c0:
6b:c0:dd:43:e0:52:74:aa:d5:74:9a:b9:74:08:0b:
14:fb:d2:1a:93:e8:18:fd:ca:ee:23:4f:8b:87:4e:
a2:f2:02:52:98:4d:6d:4f:76:6f:3b:a3:53:bd:71:
0c:72:58:a7:61:0f:91:e9:71:70:ae:63:6e:35:db:
3a:01:fe:3a:26:13:9f:46:58:84:e0:3a:0c:1d:29:
39:c4:df:2e:47:53:51:7c:17:01:50:d3:7d:55:8f:
c8:fd:4f:19:ed:dd:8c:c1:bf:c2:04:fd:f4:de:ba:
d1:db:ec:e1:9e:b5:ad:51:da:4b:f0:5d:8e:92:9b:
5d:39:e6:2e:bd:51:b0:4a:39:3d:d8:bb:73:c0:7c:
67:b7:d8:ab:ec:e2:a4:80:a9:f0:0c:3f:46:42:33:
f1:a3:ba:b1:ac:fb:e8:a5:1e:54:53:83:af:b2:9b:
00:bc:ae:c0:38:e9:b5:7d:4d:28:e6:1c:a5:46:a7:
9c:e3:c9:8f:50:ff:a2:48:e2:e6:bd:5f:84:99:c7:
20:d3:73:a5:51:24:f1:64:11:4c:76:9c:7b:d7:c3:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:12:A6:68:33:CA:A7:41:C7:B4:68:C9:BA:5A:EC:B5:04:F3:81
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9c:95:04:ca:24:05:d6:6c:0d:62:00:43:7e:66:0d:6f:cf:
d7:6a:30:60:d5:6f:7f:4b:2b:22:3e:11:20:d2:7f:39:66:57:
28:0e:14:1e:2c:c7:68:b3:3e:8e:7f:64:25:62:b0:fc:52:fa:
c3:19:4b:a3:e4:9d:61:48:eb:81:ed:c3:b4:e3:9c:36:23:e3:
fe:10:9c:4f:5a:68:22:c7:62:79:85:f6:9e:f3:4b:6d:9d:38:
86:7f:ae:dc:0c:c0:79:9c:8a:7c:d0:1f:1f:16:43:9a:ae:9f:
93:d2:d1:40:92:23:33:ce:6b:12:2e:f4:e9:c4:e7:02:36:60:
4b:cf:62:2b:9a:8e:51:fb:bb:98:5c:c0:17:94:4c:5e:a1:b9:
84:1e:5f:82:96:73:f6:a0:7a:27:3c:fc:71:2f:e2:31:0e:37:
b0:9a:3c:de:c7:28:48:e7:e7:d7:fb:f0:ca:f1:c7:c1:9e:1c:
c3:1c:21:55:36:60:69:78:1b:a8:de:be:d0:e8:0b:9a:78:9e:
6c:d1:3e:d7:c1:2d:99:1c:2f:fc:c5:af:1a:9b:48:67:49:1b:
33:8f:64:df:f9:b7:bf:1b:9e:ac:ef:47:19:3d:69:d6:48:15:
76:9e:1f:8e:af:c9:c1:85:21:ab:ef:3a:d3:b3:34:91:72:5d:
3f:21:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:49:10 2025 by rpki-client