Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: ypLvEz162lPdD+DrXZBH6xufxfw2eg54jj6agrLbJPQ=
Subject key identifier: 2D:ED:17:00:D0:31:40:55:BE:4F:56:A6:69:2E:17:6F:5C:E6:DF:DF
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 01976327FC3B64BC2B7BED32B0B27F290BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 08CC
Signing time: Thu 12 Jun 2025 08:00:54 +0000
Manifest this update: Thu 12 Jun 2025 08:00:54 +0000
Manifest next update: Fri 13 Jun 2025 08:00:54 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: iEjz2pnVXl7fzzK2FV1eyxWPjqhg8bpU80eznjv6+uw=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:fc:3b:64:bc:2b:7b:ed:32:b0:b2:7f:29:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Jun 12 08:00:54 2025 GMT
Not After : Jun 13 08:00:54 2025 GMT
Subject: CN=2ded1700d0314055be4f56a6692e176f5ce6dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:d5:bd:80:93:1a:12:6d:e2:72:6d:49:30:
ef:80:10:de:52:ee:56:b6:28:c4:db:bc:82:c3:fb:
5c:42:b1:fb:68:c8:fc:a6:5b:a2:ef:a2:f7:87:a5:
09:4e:74:67:46:da:0f:ed:7b:13:b0:ca:57:a4:e5:
da:2d:bf:92:34:31:05:a1:9b:10:f4:59:f1:44:d3:
48:1b:ae:e1:8c:36:2f:0b:e5:19:fb:b9:50:95:8f:
45:4b:5d:77:33:fc:e4:ec:09:c2:44:b3:f7:17:d2:
b6:77:9d:e7:93:3c:c3:d4:b2:32:a3:90:2e:2b:3a:
ed:5c:59:80:b7:8d:19:c8:ff:f7:1d:60:b3:a1:b3:
07:03:e2:79:de:c7:be:de:08:f2:e5:5e:13:68:07:
49:2f:fe:df:66:08:79:44:95:24:59:1e:92:61:7e:
b1:a4:6f:bb:e8:1e:cc:46:66:d1:37:8a:bd:19:2d:
ac:0b:4c:13:23:34:06:d1:44:2e:be:72:21:fd:7d:
ea:50:3b:16:87:27:79:a7:f9:d9:86:ac:c6:34:27:
13:66:aa:96:3d:42:a9:e6:6c:af:e0:d0:cf:ac:42:
d6:7f:89:c4:94:b7:f2:94:84:35:b0:9b:6f:70:d5:
97:ca:86:64:18:44:f8:87:29:86:83:61:93:cd:94:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:ED:17:00:D0:31:40:55:BE:4F:56:A6:69:2E:17:6F:5C:E6:DF:DF
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:51:19:ef:50:bd:22:45:e9:51:f7:2c:71:4d:7d:53:d3:4f:
b0:ef:74:c5:47:9f:f0:3d:d7:46:c6:5a:2c:86:b2:0a:db:c6:
c1:b3:f3:72:7a:84:20:5b:37:35:63:a5:f0:0c:bf:76:f0:c9:
53:7b:ba:a4:de:8c:1d:1c:4e:18:d0:df:90:09:04:2a:a7:a4:
e3:f9:c6:cb:17:f6:17:af:92:5e:1c:e6:00:5c:a7:7c:47:ca:
f4:2b:76:39:e1:5d:5e:1c:1c:58:85:0d:ea:82:4e:98:69:ab:
a1:3d:00:d5:f7:b2:70:bf:08:d0:57:a3:3e:d7:44:1d:70:b5:
80:81:8a:2c:3b:47:8a:65:1c:3a:9c:5f:54:25:c7:0f:d2:82:
91:79:18:85:cb:dd:10:3d:1f:a5:b8:e5:c8:4c:d8:5a:d7:62:
be:44:fe:68:a9:65:25:69:d3:fc:d6:59:4e:df:47:d5:75:ed:
85:9c:47:8b:03:fc:ef:e6:8d:8a:ea:ad:15:ea:af:48:c5:d3:
18:df:d5:98:ca:36:5d:af:84:e5:85:c5:01:a4:c7:97:9a:a5:
91:ba:19:fa:92:0a:2f:ea:a0:d1:19:91:da:0a:5b:6e:eb:03:
4c:b2:14:47:e2:fb:d1:ab:29:87:af:b4:64:46:42:f8:a4:1a:
78:89:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:44:12 2025 by rpki-client