Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier: Wr4x+Bgy5u/NohOVfBxKSzWLPtGLyFRJD4CCFou5qtU=
Subject key identifier: F2:0E:82:02:8C:3C:22:68:3F:D2:25:43:33:CC:1E:F4:BD:F2:5E:72
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 0197474287E20F4BF10947C494B8B88A9A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number: 06A0
Signing time: Fri 06 Jun 2025 22:00:31 +0000
Manifest this update: Fri 06 Jun 2025 22:00:31 +0000
Manifest next update: Sat 07 Jun 2025 22:00:31 +0000
Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=)
2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=)
3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: PU/hsGd4bzssAoZv2G0Vd5XngDc26SczBZJS9d8hZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:87:e2:0f:4b:f1:09:47:c4:94:b8:b8:8a:9a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Jun 6 22:00:31 2025 GMT
Not After : Jun 7 22:00:31 2025 GMT
Subject: CN=f20e82028c3c22683fd2254333cc1ef4bdf25e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:ee:78:e5:ea:df:ad:80:4c:e5:db:b7:58:
9b:45:8c:ab:82:58:5a:32:97:00:cc:83:cc:c8:d7:
5c:ee:a3:87:3e:6c:26:4e:57:2c:32:77:15:20:86:
dd:ba:bf:f3:02:00:f3:98:d7:c1:f1:4b:0c:1d:79:
65:74:23:8a:ea:73:d4:24:cf:98:ce:fc:8c:b2:d7:
1a:fd:cf:39:07:f5:85:b4:24:af:f5:ef:d0:b2:2e:
2b:8d:d9:a5:44:a6:ac:31:6c:8c:c7:b8:4c:45:5c:
16:22:6d:44:0b:6f:ff:61:f9:23:e2:c4:cf:ee:f7:
0c:ea:a1:53:b2:e5:77:65:a9:4a:1d:b4:86:62:88:
47:16:4d:23:85:58:cf:08:c7:30:d4:bf:ef:db:24:
01:da:dc:e1:0f:d8:06:8e:b3:7e:04:9a:41:a5:08:
26:45:ed:57:35:2e:52:72:e6:d6:84:4e:5d:61:aa:
07:2f:73:5f:37:16:37:be:22:7e:12:ca:7a:26:f1:
ab:2d:73:b3:f2:7f:26:d5:c7:54:7e:7f:a2:1f:1f:
93:81:26:2a:c7:82:ef:35:a1:fb:50:e8:02:48:85:
69:82:fb:f9:d1:a6:48:d9:b1:b1:dc:3c:2f:82:90:
ba:16:eb:e2:0a:73:01:0a:c7:c9:d6:43:49:41:c2:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:82:02:8C:3C:22:68:3F:D2:25:43:33:CC:1E:F4:BD:F2:5E:72
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:e4:91:cf:a2:9a:db:71:83:a4:d8:3c:46:b2:c1:04:93:
83:14:b9:a1:79:de:af:4d:b4:00:74:9e:89:19:24:e5:de:06:
df:f6:55:ec:a4:3c:a6:1e:00:b8:e8:02:b2:fc:6f:57:38:ff:
d1:ab:11:a1:43:e8:96:1d:3f:36:8f:fc:bf:a4:57:5f:3e:c8:
0b:af:4d:9e:55:7d:31:ab:f9:91:81:94:ea:3f:d3:13:f3:40:
ba:88:53:99:86:09:56:9c:13:65:fb:8c:fa:a5:02:fb:46:94:
af:f1:e7:e6:7e:80:1f:90:4b:7b:da:4c:98:a7:92:56:bf:4e:
e2:c6:1d:4f:47:52:41:eb:bd:9f:81:77:71:07:47:f1:3e:c6:
b6:d9:f3:a4:d4:81:81:4a:54:f4:db:58:a5:ae:dd:cd:eb:0b:
9f:1c:9a:28:a7:d7:19:ed:fa:33:37:2c:39:4a:fc:0f:db:ca:
b3:58:77:dd:b3:d4:60:cd:da:e4:cc:af:ba:73:fd:56:b6:76:
7c:c1:4a:68:e2:14:b2:f3:b4:51:a3:a0:dc:98:da:11:97:9d:
15:d4:0c:72:13:d3:ce:47:d4:8b:9c:2e:5a:28:a7:9c:ba:c0:
aa:52:6b:00:e6:fc:de:89:6f:f6:1b:53:53:fe:07:27:f4:66:
ea:ed:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:33:50 2025 by rpki-client