Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: HLDQwxOI1XYMIq0NLhQY0+g4Oah6y5+dIiduE8AAmFw=
Subject key identifier: 0A:45:27:CD:12:6E:63:EA:94:93:8F:4E:24:C5:83:4E:AF:DB:05:D0
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 01974742E5DA1665C0207AD679DE67DF5A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0473
Signing time: Fri 06 Jun 2025 22:00:55 +0000
Manifest this update: Fri 06 Jun 2025 22:00:55 +0000
Manifest next update: Sat 07 Jun 2025 22:00:55 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: 6YLH29162w0AYdOuMdoM8CGna7n1ek/qiaWo0U16v2E=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e5:da:16:65:c0:20:7a:d6:79:de:67:df:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Jun 6 22:00:55 2025 GMT
Not After : Jun 7 22:00:55 2025 GMT
Subject: CN=0a4527cd126e63ea94938f4e24c5834eafdb05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fa:74:70:e2:e5:f2:54:bb:4c:eb:dc:57:f4:
e6:46:0e:76:e1:67:2c:91:06:9e:b5:a5:e2:dc:1b:
70:97:fc:7f:67:78:c6:ed:a9:56:53:d3:cf:52:65:
3b:83:d3:46:d6:fd:0f:0c:50:6d:01:ca:f2:72:69:
b1:43:64:d0:f1:2b:ad:d5:69:12:9c:62:25:e5:0b:
16:e5:99:c5:78:43:af:42:eb:51:3a:49:9e:10:43:
7b:aa:9a:8d:fb:cc:fe:b7:40:5d:b9:62:06:dc:1f:
2b:1f:89:10:1a:ff:fe:b4:e2:82:79:cf:3f:98:be:
c4:1c:00:e9:8f:d3:cf:9e:91:06:39:70:40:28:2d:
b8:c8:6b:9b:c8:42:13:ce:71:c2:bd:d7:ca:71:fe:
56:88:a2:f1:f1:5d:43:31:77:d5:e5:80:bf:d8:fa:
6f:7e:68:5e:64:b4:4c:a7:5f:be:7d:71:54:b8:cf:
0b:99:0c:da:f5:97:27:eb:2f:f0:85:57:0b:0f:d9:
fb:81:b6:b0:7d:7a:fa:d4:4e:ad:97:1e:e8:7b:dc:
69:c8:46:6f:b2:bb:5d:f1:6c:94:fc:eb:c0:12:f2:
5f:aa:0d:52:c3:4c:af:50:0a:4c:b9:35:fe:4b:89:
4e:dd:45:f7:70:c7:04:60:6d:ac:ce:a8:14:0d:2f:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:27:CD:12:6E:63:EA:94:93:8F:4E:24:C5:83:4E:AF:DB:05:D0
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:3a:ba:7c:f5:39:08:54:ea:d3:fd:07:0e:76:43:cd:a0:
9f:7c:fa:2c:f7:d1:50:8c:39:ff:a2:1c:92:61:23:e9:52:ae:
34:92:5f:b3:c5:ba:19:d1:f6:1b:2d:a9:18:9e:a8:37:8c:1a:
2b:60:af:db:f8:a2:f0:b8:5d:cc:bd:0a:f1:33:37:8a:2a:00:
ab:dd:73:86:42:ae:b0:26:51:96:96:8e:30:10:fb:c8:0f:80:
da:57:17:09:2f:03:00:38:b0:f8:92:c4:90:50:b6:c9:57:d4:
9e:3e:55:26:40:3a:65:38:b5:e5:8c:5f:3d:db:8b:fa:94:e4:
71:03:50:4e:1d:31:bc:02:c3:1c:71:c0:71:98:e2:29:18:cf:
12:03:a1:1a:8c:b3:21:2b:b2:ce:e5:4a:39:1e:c0:81:bd:87:
6e:e4:d6:7b:bb:57:2f:cd:78:d2:88:26:02:ad:0c:fb:84:25:
11:30:0c:76:d0:df:dc:83:24:d2:e2:20:02:69:d4:43:33:83:
dd:d7:da:38:a4:73:65:c1:dc:e4:fc:8d:7f:a7:9f:d3:b4:22:
e5:e5:84:42:a0:af:4c:50:dd:87:c9:05:ae:97:6b:68:4c:53:
34:cf:8d:0c:11:73:43:09:a6:32:8a:3a:56:94:5c:2a:9d:09:
d7:6d:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:37 2025 by rpki-client