Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: Ed3GUv3+RRrGeZ6b+beSIn8daVk4uDdREmsv260aXSE=
Subject key identifier: 4B:23:54:C5:F5:FC:10:2D:D7:69:B8:DD:30:20:2D:E8:99:A6:36:F8
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 019745C2326206DC57780786A2CB677C337B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0DDA
Signing time: Fri 06 Jun 2025 15:00:44 +0000
Manifest this update: Fri 06 Jun 2025 15:00:44 +0000
Manifest next update: Sat 07 Jun 2025 15:00:44 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: m+5jLRaQhzfIQQANAD1gpZCtXusoIvgSGl/hCTmGNmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:32:62:06:dc:57:78:07:86:a2:cb:67:7c:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Jun 6 15:00:44 2025 GMT
Not After : Jun 7 15:00:44 2025 GMT
Subject: CN=4b2354c5f5fc102dd769b8dd30202de899a636f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:9d:b1:7f:88:00:c7:6c:19:56:b9:3a:21:
ea:65:6f:0b:33:b6:3a:26:e3:58:c4:87:09:01:7b:
d9:23:d1:4e:22:86:6a:4a:0a:63:43:5a:b5:95:d9:
4d:92:c6:db:86:57:9a:c8:2e:bf:03:4d:ae:98:5b:
36:0e:e6:7b:fd:a4:4d:41:c5:69:c7:87:7f:26:2b:
9e:0c:86:5f:54:09:bc:80:d1:9e:45:45:cd:26:e1:
08:ff:2d:ef:89:6f:22:ee:d1:85:08:81:42:af:ed:
86:c4:9a:75:eb:af:a2:fd:e5:0f:89:a0:e6:b4:b4:
83:20:2c:d5:15:1a:b7:e1:23:a8:22:53:4b:f2:83:
99:b0:ca:e9:c0:d2:4b:ca:0a:73:c6:7d:69:9f:2b:
09:5e:0c:af:10:6f:40:24:ae:e5:3f:bf:cb:c2:2a:
d8:6d:fb:fa:49:09:03:10:45:90:19:7e:19:56:f5:
98:b0:5d:e2:ce:24:8c:5d:3d:5e:27:60:2c:ab:fd:
58:b4:0f:10:90:10:a2:8a:ed:5c:f8:48:5f:3f:06:
59:3b:c0:ec:5d:ee:9c:a9:69:90:05:a1:3a:c6:ac:
42:9c:b2:32:b4:66:2d:73:98:7f:36:8a:a2:a4:43:
f2:89:52:a5:ab:64:1c:0b:d6:41:5d:63:8e:b0:b1:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:54:C5:F5:FC:10:2D:D7:69:B8:DD:30:20:2D:E8:99:A6:36:F8
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:46:67:5a:cf:19:9e:b9:0d:2a:8f:12:9a:a6:3d:cc:6e:
76:36:d8:12:1e:5c:5d:ad:e8:f3:c4:81:2b:e3:e5:9c:85:56:
98:0c:0a:56:30:0b:5c:a0:0f:5d:d1:b2:f2:45:72:45:c6:c9:
a6:84:6f:8f:bd:65:e2:53:b3:1f:8c:df:24:62:08:14:ad:1b:
b1:00:63:f7:d0:3d:a3:6c:75:cc:f0:c3:fa:e4:57:31:94:f7:
5f:ad:c7:12:c1:91:1d:14:6b:19:67:95:ae:01:20:45:fa:5d:
e3:7b:07:2b:e5:6d:d9:e9:c8:05:23:1f:36:4c:1f:f7:bb:25:
05:8c:54:a0:0e:2b:66:63:a1:67:0b:6e:8c:60:ca:88:c6:c3:
d3:c1:12:94:61:d2:54:ff:62:90:4a:1b:5d:7b:7b:5e:75:99:
f5:f1:86:49:f4:b4:69:bf:06:8c:25:9a:23:27:b4:69:20:86:
1e:55:75:79:d2:47:8f:cf:93:c1:79:5e:a0:3a:78:6f:97:84:
c7:de:1d:67:26:5c:13:4a:15:ed:d8:19:7b:9a:d2:73:f3:e3:
af:a6:89:53:45:42:36:55:ed:f4:0d:76:ab:4e:54:03:25:dd:
14:f6:f7:14:c2:de:ab:9c:03:bf:a0:18:8d:b7:5e:46:2b:2f:
34:14:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:57 2025 by rpki-client