Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: 7Pe5YdjXpE1hEw81wgWz0B/JKYzs/qkyr4I7AAkoqfY=
Subject key identifier: 28:43:26:A9:9D:49:84:48:79:A6:16:BA:F9:4F:AC:DB:B2:0F:5A:17
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 01974B566A0A69E3B17ACA4AE7B7B7F28838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0BD3
Signing time: Sat 07 Jun 2025 17:00:43 +0000
Manifest this update: Sat 07 Jun 2025 17:00:43 +0000
Manifest next update: Sun 08 Jun 2025 17:00:43 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: S6JBBBMdGCmxclfxUSb3g2vu94D6+6SryG2/ft+U1Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6a:0a:69:e3:b1:7a:ca:4a:e7:b7:b7:f2:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jun 7 17:00:43 2025 GMT
Not After : Jun 8 17:00:43 2025 GMT
Subject: CN=284326a99d49844879a616baf94facdbb20f5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:0a:81:06:53:e4:a0:16:e3:0e:0a:fa:50:
42:a7:e4:8d:9d:09:80:db:12:9a:74:0e:7b:6a:19:
23:a2:2a:db:bc:60:0b:cd:66:ff:cf:72:ca:e9:fe:
b8:8f:0f:33:29:e5:13:a7:f7:51:17:3c:bd:45:01:
25:13:47:a8:ae:56:89:63:a4:96:d2:3c:48:8e:c2:
0f:0e:b2:37:35:11:0f:fd:13:ee:2b:6e:da:7c:ca:
37:9f:9f:47:27:87:d8:47:88:aa:89:76:46:c2:e8:
29:65:e6:a7:63:99:e2:57:a1:8b:99:a4:36:15:11:
9c:18:f5:86:16:cd:2c:89:45:e1:aa:9a:fe:84:c6:
26:72:3e:df:f8:c7:42:c3:f9:bb:64:f6:0c:c4:65:
8e:74:7a:bc:7b:b0:05:01:81:b6:ac:c8:de:67:ac:
7f:c1:20:6c:25:18:57:18:6f:39:f3:4c:b1:42:95:
10:37:db:bc:8e:92:bd:f8:16:e5:3e:e3:b4:6d:91:
df:05:28:6e:0e:e4:cc:0f:7d:76:27:7e:2d:bf:aa:
62:44:fc:8d:72:4d:07:b3:d2:a5:ac:24:cf:3a:d4:
d5:70:af:82:10:32:c6:a7:e1:19:b7:cd:7e:bc:1e:
71:dd:cd:a3:94:71:cd:01:b5:c4:cc:c2:bf:30:88:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:26:A9:9D:49:84:48:79:A6:16:BA:F9:4F:AC:DB:B2:0F:5A:17
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bc:a7:6d:0e:0e:d8:d9:3c:9d:fb:c7:df:cb:08:3b:69:d1:
72:c2:2f:73:77:68:4b:0f:91:3f:93:34:85:52:cc:48:cf:52:
6d:5d:18:af:25:ea:3f:89:f2:45:b4:6a:c8:f1:c6:db:14:55:
31:56:8f:7d:ce:5f:77:da:e8:a4:9f:68:4d:08:8f:82:68:e7:
aa:47:fe:d6:9e:14:b1:0c:92:22:86:60:3f:d4:67:cb:72:e1:
54:c1:9b:21:66:04:02:31:08:12:91:a0:43:9f:3f:66:fc:8e:
c7:b9:73:c4:90:03:de:5c:70:00:65:1f:d0:7b:c8:73:59:ec:
ed:31:65:1d:4c:f8:74:1e:c1:72:1e:bd:c8:9f:79:d4:dc:4d:
25:74:fa:17:c2:35:9d:86:d4:e6:f5:5d:77:00:fb:6f:f3:30:
03:8a:44:d8:81:01:1c:19:b1:ab:73:da:34:c0:0f:8d:36:4e:
2b:69:1d:7b:c0:c6:c3:d6:f1:5e:c7:42:6a:4e:49:1b:ee:37:
d2:29:5a:4e:52:87:3d:ba:73:48:a7:f5:5f:a9:ae:2a:eb:07:
de:5f:51:44:11:08:0d:80:44:34:ca:ec:3e:3d:4e:e2:ee:36:
a5:b8:ce:60:55:0e:b5:09:70:ee:c1:ae:f7:b1:d4:9b:a1:d1:
4f:cd:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:17 2025 by rpki-client