Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: LWmN0/ATevfMPbboMY1x0WHVJvdwNt9Fh5Tsxjsj/2c=
Subject key identifier: 88:C6:5B:8D:AA:25:A5:C2:CA:E2:34:DD:10:CD:0C:E5:10:27:13:3A
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019750462D3CAC72B4DC8EAC1C10A5B419EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 16:01:05 +0000
Manifest this update: Sun 08 Jun 2025 16:01:05 +0000
Manifest next update: Mon 09 Jun 2025 16:01:05 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: i4XIXb4rsV72qOlnQr/uCJkm2uFIZTTcRaF/edZhil0=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:2d:3c:ac:72:b4:dc:8e:ac:1c:10:a5:b4:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jun 8 16:01:05 2025 GMT
Not After : Jun 9 16:01:05 2025 GMT
Subject: CN=88c65b8daa25a5c2cae234dd10cd0ce51027133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:73:24:47:c3:ad:6c:27:00:02:98:48:7a:
d7:f9:66:12:96:1b:de:3e:bf:64:1a:8e:08:e4:9b:
a9:49:39:18:f6:d4:05:45:a0:b2:68:4a:db:49:29:
99:0a:46:dd:bc:31:92:c9:d9:ae:d6:e5:cc:73:d5:
71:b1:94:4b:5c:66:5a:0f:04:41:45:18:9c:62:2c:
0c:f3:0d:ed:7d:4a:cd:8d:08:ae:c8:6f:a6:ec:91:
dd:77:12:40:df:59:b7:41:fc:0a:98:4f:3e:e1:5c:
0f:f1:6f:dc:00:b1:08:cb:7e:e3:5b:57:2d:e2:5f:
3a:c3:c2:4c:54:be:6a:61:e3:c7:84:14:65:6b:6a:
34:af:7d:b1:7a:1f:43:ce:2b:73:90:b6:db:8f:83:
92:ce:35:08:81:2a:92:d0:79:8c:2d:c9:92:f9:c4:
3a:3a:80:4c:49:2a:0d:57:4a:0b:7f:cd:86:88:e9:
a3:69:97:98:6d:fd:a0:77:7c:89:3c:9e:62:5a:57:
a8:bc:db:32:34:9e:00:12:e7:f5:e1:13:27:c4:10:
b9:95:b1:2f:1d:5b:e7:9a:b4:dc:a4:c8:e6:cd:af:
27:de:7d:09:e0:8d:c1:d2:f0:ec:85:e1:3a:64:41:
61:92:bf:35:14:cd:dc:0a:52:4b:27:9d:e0:44:1a:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:5B:8D:AA:25:A5:C2:CA:E2:34:DD:10:CD:0C:E5:10:27:13:3A
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:76:66:cd:b0:32:4e:b3:7f:c6:95:4d:32:28:7d:73:3f:43:
c5:0e:56:f2:0f:01:1a:66:60:64:85:55:6f:2e:9f:d6:dc:d2:
6d:a6:45:8b:44:e0:57:09:c6:ba:b5:8f:08:78:89:ad:55:7a:
89:c6:47:76:f5:79:f2:9a:58:66:e9:49:48:70:07:9c:92:d9:
57:f3:99:82:26:04:22:7e:4d:41:f1:f5:70:01:ba:1c:45:0f:
8f:a8:93:7f:bc:6e:66:82:d9:78:c5:52:28:63:a4:8d:f1:a8:
f7:ca:06:c0:f7:94:4e:d2:85:eb:a5:46:a5:64:b2:56:50:de:
07:0b:47:ad:6f:9e:83:87:74:2f:32:89:74:9e:3f:be:78:50:
ba:7d:b3:4b:e4:2e:4d:37:2f:a0:62:28:9c:94:af:47:77:83:
67:b3:f3:b3:78:73:c1:d4:ea:f5:46:18:78:2d:2c:f8:9c:11:
d5:c1:3d:55:a6:b1:00:13:ef:d2:91:e0:0a:a1:18:23:f8:17:
d8:e1:d7:87:17:cf:9b:33:c6:8d:ad:34:77:2b:53:cc:9d:a5:
0e:1b:38:c2:08:ee:7a:ce:87:3e:b9:cf:5d:b8:7d:a7:f0:55:
73:7c:4a:50:d3:6b:1e:39:a9:c7:8d:84:d3:ad:10:64:57:9d:
d0:9e:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:36:22 2025 by rpki-client