Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: Frhn2TK0KWcZDnTnKA2KfEUQQHZb4B0oIx0cK70Lro0=
Subject key identifier: 4F:DD:6C:81:3D:0D:B2:A6:FA:32:FD:DC:84:56:5E:46:CC:A1:F9:1D
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 01974A0D024BB9AA24592EB6219A88B9A5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 055F
Signing time: Sat 07 Jun 2025 11:00:55 +0000
Manifest this update: Sat 07 Jun 2025 11:00:55 +0000
Manifest next update: Sun 08 Jun 2025 11:00:55 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: yMo9LDfIx8AkzRDfIOKUfLYgumtJCvMJAiYyqrTIx3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:02:4b:b9:aa:24:59:2e:b6:21:9a:88:b9:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jun 7 11:00:55 2025 GMT
Not After : Jun 8 11:00:55 2025 GMT
Subject: CN=4fdd6c813d0db2a6fa32fddc84565e46cca1f91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:84:f4:63:74:01:f8:1d:ae:1b:0e:93:1f:
bb:07:b7:e7:01:f2:fb:94:86:d7:da:86:62:14:90:
45:1c:ca:ae:b2:e0:ee:80:93:35:24:dc:b3:ae:68:
4f:cf:c4:ba:cd:e3:5e:60:9a:5a:92:94:5e:fe:fa:
61:e5:2c:55:3a:7b:f6:c7:5c:3b:a5:26:f5:37:1e:
39:49:e3:56:7b:64:6d:37:1c:fa:7e:87:01:48:7e:
b7:00:0f:24:f8:89:42:09:7d:36:b7:50:81:19:32:
9f:11:a4:55:59:7d:dc:ce:26:4e:c0:f1:b9:44:8e:
72:ab:10:17:40:7c:69:7a:98:55:09:69:da:39:0e:
21:30:fb:91:8d:a1:42:0d:6f:03:18:09:a2:d9:5b:
ae:84:d7:fb:1c:af:45:9a:66:57:dc:cf:76:d2:f8:
c1:a0:b8:3d:b6:a5:73:28:a7:a1:92:16:3e:ad:db:
18:24:bb:43:04:7a:6c:78:f5:f0:6c:88:2f:08:fd:
46:70:6b:dc:cd:97:85:fe:6c:4f:72:69:20:ce:db:
d3:8a:9e:3c:69:f7:5e:3b:22:78:6f:e9:14:13:5a:
42:05:63:89:10:c2:91:da:f4:05:e5:28:68:80:6d:
b7:b1:34:77:54:45:ee:79:99:b0:92:98:75:f4:8b:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:6C:81:3D:0D:B2:A6:FA:32:FD:DC:84:56:5E:46:CC:A1:F9:1D
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:c4:b8:5f:88:1a:60:7a:84:4d:29:15:13:88:cf:b1:8a:
09:bb:1a:bf:8f:11:1f:6a:cb:d6:2f:a3:33:b9:f5:98:26:38:
52:cf:a7:73:fc:97:db:d3:f0:a0:ea:4e:b3:36:11:d6:76:99:
d3:3f:1c:fd:4d:4a:97:87:d1:a0:79:b5:7b:62:f3:79:9c:df:
b5:f0:49:56:47:7c:ea:32:90:01:ea:85:8b:df:55:de:62:38:
5f:6a:d6:ee:31:90:5e:ee:29:cf:4e:8f:de:63:cf:d5:46:b7:
6b:1f:23:41:e3:3b:6a:56:91:b8:4a:cd:ee:8e:4d:8d:b8:de:
0e:e0:22:7c:42:d8:81:4a:f9:6e:7a:fe:bb:ba:b6:ee:59:ab:
87:6b:55:b6:61:5f:a4:45:b1:69:24:dc:c9:b4:55:d1:1c:c5:
30:c2:06:8e:e6:ab:91:a8:67:75:08:78:b1:97:d4:3d:3c:a1:
32:7d:8e:05:8e:91:fb:54:94:b4:bc:98:20:ea:0e:f6:24:9a:
49:64:4b:32:5f:50:94:ff:6b:fe:3d:a1:ba:a2:8a:bf:49:e1:
79:c5:6d:e9:6b:91:7a:01:9a:b7:6f:0e:cb:a8:b2:0a:3c:11:
9b:f8:81:32:be:b2:d6:46:27:09:43:6a:a4:1e:4e:54:bf:53:
e5:97:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:31 2025 by rpki-client