Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: 6dkSvhBOY6wksZdqhOEfzAahMMmrWO/vCpCXQO5gNzo=
Subject key identifier: 40:CC:85:BC:A5:BA:4E:D1:07:71:51:B8:95:D8:3D:70:1E:17:E1:42
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019768F2CAFA31FF5BB3140A97C6D0D7828B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 04F8
Signing time: Fri 13 Jun 2025 11:00:31 +0000
Manifest this update: Fri 13 Jun 2025 11:00:31 +0000
Manifest next update: Sat 14 Jun 2025 11:00:31 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: CQsLIFKm3KgELi+2QwG63BHYVaLY7cO0nYubdxlDKs4=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ca:fa:31:ff:5b:b3:14:0a:97:c6:d0:d7:82:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Jun 13 11:00:31 2025 GMT
Not After : Jun 14 11:00:31 2025 GMT
Subject: CN=40cc85bca5ba4ed1077151b895d83d701e17e142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:c9:05:0b:59:11:0b:a7:1a:24:7b:3f:ae:
74:a6:5d:50:81:cf:b6:30:ec:93:23:2d:d0:4e:52:
1e:2a:ec:4a:01:63:0b:02:4c:7f:63:cb:0e:f8:af:
27:2d:7b:86:a4:b4:21:7f:29:13:61:13:52:84:4c:
03:56:05:2d:23:6c:f6:57:da:44:63:21:44:df:26:
ca:c1:c8:f7:b5:1c:1c:d5:7c:af:f0:9e:af:36:94:
a9:ad:4c:74:99:88:3a:ba:9f:53:fb:46:ce:c7:40:
1b:75:f5:bf:ab:f6:6a:e5:ac:18:7f:a0:aa:f3:c7:
67:ea:93:88:95:8c:7d:3a:4e:fa:50:8d:94:bf:78:
39:a2:70:77:d8:c2:c8:c4:fa:15:47:50:4b:c8:cd:
83:5c:d5:65:c2:00:fc:15:ae:b7:ac:62:8f:69:ae:
f9:f6:59:84:9a:3a:11:f3:d4:93:57:d4:3e:f2:19:
0f:ca:10:ac:27:3c:28:04:56:50:ba:89:d8:f8:9b:
b9:81:21:65:70:07:91:3e:91:8e:04:27:8b:16:0b:
b8:3e:59:89:3a:8e:c4:08:ed:fa:71:4e:fc:1b:cf:
ab:42:f1:0a:2b:20:6c:75:a1:05:ae:6f:7d:92:a9:
ef:f8:59:8b:f8:1a:32:b5:55:39:27:52:e8:41:31:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:85:BC:A5:BA:4E:D1:07:71:51:B8:95:D8:3D:70:1E:17:E1:42
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:3b:27:c5:50:e8:fc:3a:4d:76:f9:7f:d4:cc:f0:5c:d8:
c5:d7:99:b9:e2:59:cb:30:ff:82:d6:0f:42:f3:cb:ed:a5:18:
bf:8c:c8:88:15:57:34:ed:67:bb:f9:21:1a:42:09:b0:1e:14:
91:95:2e:da:eb:21:41:27:e6:c9:c0:f4:46:02:1f:ad:2e:b3:
24:a8:82:22:41:e8:3a:5a:b1:ce:c3:3e:4d:b7:cf:63:8b:b6:
49:57:cd:01:e7:6f:91:16:87:7d:32:b3:b0:11:bc:19:b3:58:
ac:7f:1e:82:47:ca:f8:f2:fc:eb:36:de:8b:c7:b2:ff:e3:3b:
79:4b:4a:e0:8d:db:ee:f0:a3:b6:27:f6:7c:19:08:36:90:58:
57:dd:4b:a3:59:4c:90:b7:d6:14:9d:42:a8:ed:48:7c:61:85:
88:79:f3:ec:5c:69:e5:d7:f1:d6:82:41:ed:b7:0e:10:fe:6e:
95:6e:5d:a1:58:02:f7:74:4d:e4:fa:62:38:e4:6e:43:f7:43:
70:f9:95:45:a8:40:37:8a:b3:81:dd:d4:8f:29:8f:d8:76:c3:
24:b2:3a:e6:33:b0:1f:aa:93:d5:2a:44:e4:4e:46:88:7d:ba:
70:b7:34:f8:d2:a2:47:6d:9b:ba:d9:8e:eb:5c:61:ce:f4:aa:
15:21:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:43:37 2025 by rpki-client