Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: uj3k81uzy/3LmpvZeDrM39Yh81pPFBSoygx1GqdTdAA=
Subject key identifier: F1:73:22:43:AD:11:E2:D6:79:7A:A5:BF:55:19:BC:A5:C5:4B:80:83
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 01974E205241413B82D2418556F61ACF34D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 0537
Signing time: Sun 08 Jun 2025 06:00:30 +0000
Manifest this update: Sun 08 Jun 2025 06:00:30 +0000
Manifest next update: Mon 09 Jun 2025 06:00:30 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: P9eOijmsDljVZpYboU6Kye95EErXF3nj+KREHuVzaU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:52:41:41:3b:82:d2:41:85:56:f6:1a:cf:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Jun 8 06:00:30 2025 GMT
Not After : Jun 9 06:00:30 2025 GMT
Subject: CN=f1732243ad11e2d6797aa5bf5519bca5c54b8083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:91:b6:d8:27:3c:84:fb:e8:7e:22:63:d1:
06:8d:dd:39:fd:56:01:0e:62:0d:7f:c0:cc:dc:1a:
bd:d6:80:bf:f7:a9:cb:80:e4:78:b0:84:0c:cf:ea:
fd:1e:d6:65:f5:83:ef:49:23:55:94:1b:a4:79:9f:
38:3d:d3:49:da:35:cd:af:b9:58:64:49:44:ff:9f:
a6:0f:cd:b5:ea:dd:43:f3:45:34:15:ab:d6:e8:5a:
88:7e:19:b1:e4:3e:94:d0:12:3c:d2:e2:bc:5d:77:
9e:54:3c:d8:2f:b9:da:25:5b:ba:01:68:af:ee:e1:
20:03:08:43:b4:dd:27:40:c5:06:df:72:bc:31:d3:
b4:00:45:15:ae:82:8e:a0:88:4e:40:50:50:6e:ab:
f1:93:30:40:e4:6d:7f:b9:f0:32:5e:69:9f:dc:63:
27:47:27:52:58:ac:4e:3a:95:e2:7d:65:c3:58:ee:
92:b8:b2:19:98:62:bb:2f:e8:3b:3f:d8:59:12:b8:
9c:3f:a5:70:cf:53:ea:18:44:7a:43:13:1b:c5:36:
be:d8:f1:6a:da:b2:81:b3:21:da:4a:94:51:c0:85:
1d:84:42:6a:ab:32:af:2a:7c:16:83:36:39:b6:ac:
d1:67:85:24:7b:6b:46:33:cc:37:95:72:cc:75:d7:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:22:43:AD:11:E2:D6:79:7A:A5:BF:55:19:BC:A5:C5:4B:80:83
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b3:e2:d3:d2:98:27:14:88:80:fd:2e:28:51:00:13:53:aa:
41:17:3e:e5:a8:d3:fe:2b:36:93:b9:70:41:62:94:65:46:4e:
9a:c9:89:ed:ef:b1:69:e8:97:38:c4:52:60:d6:a1:98:49:03:
a0:54:ff:ed:4b:9c:e1:d8:7e:e4:38:bd:21:7e:37:07:3a:9d:
b8:6d:95:3c:83:6a:35:01:29:6b:c6:bb:da:df:99:f0:c6:23:
09:64:2a:7d:34:18:44:6a:aa:2b:bd:eb:6a:a8:49:ce:2c:e6:
8a:a5:62:62:8f:36:f2:b7:60:52:3e:86:b6:dd:d5:ea:74:31:
15:c8:7e:05:96:fb:b1:d1:23:a5:4d:53:28:54:8a:1e:42:14:
76:ce:5c:8f:4f:f3:9d:60:65:73:0b:46:d6:3b:ca:be:29:fd:
85:5b:bd:c4:f7:1a:a5:82:b9:96:0f:51:c2:95:f0:d3:fc:95:
85:c1:fb:d7:a4:75:46:0f:bf:c4:04:ed:87:fc:d3:83:cf:6e:
04:55:dd:7b:9f:a2:b6:31:41:17:80:51:1d:91:66:05:d8:89:
0c:6c:cc:5d:52:62:a4:56:7a:b9:d1:7e:ca:a1:f4:e8:f1:ff:
e3:10:20:a0:fe:02:1c:eb:45:bc:f6:ce:09:35:ec:94:a9:0b:
32:5c:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:34:31 2025 by rpki-client