Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: G2h+17bMHf5y9mhHWFlZZ30y5nl3HPQisIbt9qG7QXY=
Subject key identifier: 59:E7:25:9B:76:F3:39:E4:29:CE:C4:BE:A2:9F:2B:A4:DD:23:DC:4B
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019752A239760011A3EB0018D0D4964E7022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1454
Signing time: Mon 09 Jun 2025 03:00:52 +0000
Manifest this update: Mon 09 Jun 2025 03:00:52 +0000
Manifest next update: Tue 10 Jun 2025 03:00:52 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: kxZIpwZrszjk3QR2iEs5nhzWOALpNBUqUp/u8ZyZrMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:39:76:00:11:a3:eb:00:18:d0:d4:96:4e:70:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jun 9 03:00:52 2025 GMT
Not After : Jun 10 03:00:52 2025 GMT
Subject: CN=59e7259b76f339e429cec4bea29f2ba4dd23dc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:18:c0:44:29:16:1e:d3:df:4c:b9:a6:55:79:
4b:61:c5:e4:a5:22:78:72:66:22:19:8f:8f:94:ca:
f4:1c:66:1c:15:02:7f:69:ce:9c:78:e1:00:4d:fc:
d9:a2:a0:e3:24:36:86:f7:b6:ff:88:ce:b5:b3:e3:
95:50:b7:dc:1d:c2:56:c1:fd:19:2e:05:f5:fc:76:
4e:49:32:07:20:54:05:a7:79:36:c6:5f:b7:a2:98:
32:77:95:a4:f0:2f:f8:ba:ea:64:a5:dd:c3:87:c8:
5d:d7:e4:48:14:66:c8:14:d3:d1:1f:5c:50:cb:9e:
f0:bd:ed:76:7f:b0:c5:8f:12:e8:12:ef:e0:f4:f9:
14:e3:07:d8:5a:03:c8:6a:f4:e4:f0:ec:40:aa:07:
fb:43:eb:cb:ff:e8:08:44:14:68:a6:cc:b7:e7:6e:
73:fa:d8:5e:3d:d9:98:32:ee:bb:a1:ce:b6:11:4a:
07:5c:c6:3d:4a:85:a8:4a:9d:ed:77:cb:f7:22:ec:
79:0d:11:8b:a0:d1:13:48:3f:ed:0a:24:85:9b:55:
57:b6:2f:25:64:b4:7b:01:fe:11:84:ce:63:e4:55:
ce:e5:77:37:f7:e2:58:0e:8a:ee:0e:aa:fb:2b:e8:
e9:2d:c0:4c:f0:27:d5:42:09:1a:d1:86:dd:3a:81:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:25:9B:76:F3:39:E4:29:CE:C4:BE:A2:9F:2B:A4:DD:23:DC:4B
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:10:a4:3e:26:11:e4:cd:63:7d:fc:46:4f:c9:e0:78:55:96:
de:66:8c:e6:86:05:fa:ff:1e:39:08:79:6f:3a:b8:a6:19:0a:
57:cb:58:0b:29:57:8f:5e:18:ab:94:a6:d7:8a:c6:34:e6:bb:
e3:77:75:fe:c0:ec:2d:66:19:e1:3e:4b:49:fc:59:a4:49:0d:
b5:60:e7:44:eb:67:6d:57:e6:df:09:db:e3:01:95:e0:0b:8b:
2c:f8:fc:4a:cd:67:d8:d4:0d:44:5a:8f:ff:82:0a:cb:df:da:
98:e5:84:fa:07:ac:15:50:19:46:f0:7c:37:91:d6:c7:6e:6e:
26:19:f2:f3:ca:f8:c0:72:39:97:62:7f:bb:00:3c:a7:c9:7c:
06:41:a2:b0:ed:e7:e1:16:42:c7:e8:52:9c:5c:c9:a1:17:fe:
13:dc:c6:19:d9:0f:0c:bc:83:79:29:6e:7a:09:a4:ae:38:3f:
df:b3:d6:dd:bc:31:86:6e:ec:c3:39:0d:bd:5c:11:1e:0b:ea:
3c:5e:3e:1a:d4:66:fc:c1:a1:a8:0d:57:73:7c:30:af:5f:ee:
c8:89:06:90:45:fd:b9:04:63:52:a8:60:bf:a9:52:ab:b4:7e:
0f:4c:fb:f9:f3:c0:f7:b2:77:38:e7:15:64:d2:7a:46:6a:f2:
e4:75:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:46:10 2025 by rpki-client