Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: HXcXYE5btcsMtzy+23rRuO1UhjDjZmImNVLzuRRWKUU=
Subject key identifier: 62:C9:B8:9F:9C:EF:44:A7:58:F5:0C:2B:02:04:38:DB:41:1E:C7:D3
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 0197488C0E25055681461C22D6D950322821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 14CD
Signing time: Sat 07 Jun 2025 04:00:27 +0000
Manifest this update: Sat 07 Jun 2025 04:00:27 +0000
Manifest next update: Sun 08 Jun 2025 04:00:27 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: oaRDJp6qK2MTl8/oiqjpWfCHJNh7Pdkd2G04dvBsNqY=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:0e:25:05:56:81:46:1c:22:d6:d9:50:32:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jun 7 04:00:27 2025 GMT
Not After : Jun 8 04:00:27 2025 GMT
Subject: CN=62c9b89f9cef44a758f50c2b020438db411ec7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:bb:7d:71:c4:b0:49:cf:51:cf:7c:9a:bf:
33:c9:70:42:8d:7c:89:e3:36:f4:1a:03:13:ca:2c:
57:d6:fc:46:74:6a:f9:06:3b:12:f5:c8:c8:4e:bc:
3d:df:bc:d0:70:26:d0:24:81:e1:70:7f:e7:31:69:
25:37:53:27:9d:1b:09:4c:81:86:5d:88:21:6f:35:
7c:5f:11:05:71:8e:e4:5d:45:02:6f:9b:0d:ac:05:
50:db:f9:23:5e:77:53:f5:ff:8f:bf:d6:80:77:ea:
4a:a2:03:b8:3d:0e:2b:4e:7f:9d:c7:7e:f3:65:a5:
28:f8:f0:ed:ca:35:70:6d:6d:e9:a2:8c:2b:07:41:
0b:35:7b:de:37:a3:81:18:7f:0b:c6:ce:c8:d1:d5:
58:17:02:4e:34:be:e6:e6:c7:7e:1a:f3:c2:2b:d0:
e4:e8:cc:ad:dc:a0:e1:7d:d4:77:f1:cc:ee:0d:7b:
a2:a1:3b:64:ae:f6:85:9c:21:62:16:34:33:56:b1:
df:6b:f4:3c:a8:d4:68:b1:44:dd:fe:b2:0f:b1:41:
87:43:26:c7:b4:cb:8e:29:0e:b4:0b:be:7b:cb:24:
6d:f6:c4:e7:8c:b9:b1:06:63:ef:0f:b9:37:8a:81:
33:63:0b:41:86:93:29:a5:f4:50:de:c5:8b:6f:9d:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:B8:9F:9C:EF:44:A7:58:F5:0C:2B:02:04:38:DB:41:1E:C7:D3
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:cb:82:56:42:c0:fc:23:ed:8c:8c:c8:78:30:6d:15:f9:
ee:fa:14:bc:e2:10:97:e7:7e:96:9f:ee:84:8a:c2:32:97:f9:
fd:73:d4:da:b2:a5:ec:ae:83:24:cb:97:07:65:a0:e8:55:42:
2e:85:24:a6:e6:d1:27:17:5a:19:d2:96:a0:d4:9b:29:fb:8c:
c3:4c:77:de:6d:52:08:2c:cf:5d:8d:af:a3:d4:53:ce:f4:c2:
84:73:15:d8:31:db:37:13:9e:9e:4a:be:41:10:ef:76:3a:51:
d9:f4:dc:99:0d:78:06:c1:47:b0:ea:03:0b:81:2f:53:1c:5e:
df:ab:35:e0:1f:02:9f:fa:e8:15:c3:cb:88:1d:43:f1:dc:9f:
6a:d9:d5:9e:57:63:cd:ea:8b:13:0b:5f:43:91:9c:e8:ca:ab:
a3:07:40:65:59:2e:47:94:ce:a7:bc:7f:d6:fa:ec:d6:f3:e8:
59:69:7a:6e:f7:a7:c5:8b:ad:ad:af:89:ae:c7:70:ca:30:a7:
60:a4:53:bb:af:b7:81:fe:66:c4:ec:3c:4a:26:b6:77:9d:dc:
7d:9f:1f:01:a3:f9:a2:ef:05:37:ab:f6:f9:30:9b:ff:d4:34:
d1:33:2e:5b:59:07:30:a2:4a:6f:76:73:30:ea:b8:93:e8:85:
a4:07:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:36 2025 by rpki-client