Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: FxCd/fwjb/TIWINZLJjY1UFRwljSTVgJkVw+6fomBMM=
Subject key identifier: 60:41:71:90:68:B6:3E:0A:0E:5B:93:61:85:FE:E4:56:99:0D:43:54
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019751212E83BDDF7E869D14EF0F840722ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 1305
Signing time: Sun 08 Jun 2025 20:00:18 +0000
Manifest this update: Sun 08 Jun 2025 20:00:18 +0000
Manifest next update: Mon 09 Jun 2025 20:00:18 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: s3xbSMKFPOGXh91idRTZOkRf3fYcmhdrJCD/t+JqrN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:2e:83:bd:df:7e:86:9d:14:ef:0f:84:07:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jun 8 20:00:18 2025 GMT
Not After : Jun 9 20:00:18 2025 GMT
Subject: CN=6041719068b63e0a0e5b936185fee456990d4354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:2c:94:14:c0:bf:44:87:9e:23:ba:65:91:
d9:63:1f:ca:12:ff:1e:8b:0c:0f:4a:f9:49:da:3c:
82:03:47:17:91:79:3f:12:16:75:b6:fa:b0:9f:f7:
61:51:7b:a9:7d:d2:48:2d:60:ac:4d:fa:53:aa:fd:
7d:40:80:33:08:bd:0d:2b:82:68:6d:1e:4f:f6:1e:
da:a0:52:a7:02:ec:49:e1:72:75:30:1a:36:b6:1b:
6a:92:38:f5:f1:30:a2:64:14:04:c7:28:9e:49:d6:
b3:e6:52:d2:b5:14:e0:8e:69:4d:94:78:d7:71:7a:
fe:72:24:65:c5:5b:13:83:7b:d2:27:1e:16:67:a5:
b2:30:a6:01:ff:00:f2:94:f6:49:95:f4:2d:fb:96:
3a:e6:b1:77:81:9b:20:f7:34:54:05:c3:b8:c3:1c:
05:a6:fc:07:1b:0c:14:a6:26:1b:c1:85:1d:e5:97:
fd:27:35:79:18:f6:7d:36:8a:92:2a:cd:fe:aa:37:
0b:94:25:f0:f8:1d:8a:b8:0c:60:11:74:9c:96:a7:
a5:15:dd:9b:fc:23:30:b4:40:22:59:10:6e:39:15:
19:4d:c4:38:8a:6f:de:8b:5c:5f:18:80:e3:b0:46:
aa:f1:86:67:b0:f8:e1:6e:23:01:0c:f9:1a:9a:61:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:71:90:68:B6:3E:0A:0E:5B:93:61:85:FE:E4:56:99:0D:43:54
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:c4:92:f9:31:8f:8f:38:d6:9c:83:ec:e0:d5:bc:14:2e:
3d:55:45:2d:59:14:22:2b:2b:94:b2:3e:3a:f6:93:c0:f5:38:
62:98:70:82:c3:76:69:5a:9a:36:76:5b:db:71:96:93:60:90:
9f:95:a5:74:9e:04:4e:88:ab:23:0e:a3:4e:ea:26:2c:38:0f:
ae:e0:ed:7b:88:42:2f:c5:8a:00:e9:07:38:39:bd:18:a5:68:
4d:a6:39:24:91:9d:c1:72:be:9f:10:eb:b9:fc:e4:2b:b6:15:
db:54:92:71:29:52:95:63:cf:00:77:b4:5a:80:74:f0:d3:a0:
68:a4:f0:0d:42:fe:5e:74:04:05:d5:a8:19:08:b0:4a:11:56:
fa:96:40:4a:05:fb:47:de:6b:3d:02:78:a6:ce:5c:77:de:fd:
10:be:15:fc:7c:0d:af:a8:36:57:18:6e:af:54:5a:a8:ea:bd:
8d:fa:f5:14:a3:49:f5:a9:78:43:9f:54:b1:7f:72:a2:23:88:
18:2a:8d:15:67:89:c3:55:19:91:94:db:cc:9e:20:a9:9f:f4:
97:1d:61:49:d0:41:fb:d1:49:b6:60:ad:41:ef:8d:d3:b8:c4:
5b:c8:77:37:d1:3f:71:35:b5:82:2f:bc:aa:fb:c9:df:0c:b2:
02:a9:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:01 2025 by rpki-client