Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: AN4rPwHVWHxGAEF0N7d467TDkHkAha1WUfLUwQECUvA=
Subject key identifier: D3:2E:9D:CE:22:CE:A0:8B:8F:29:D0:E1:66:18:9C:FB:1E:D4:0C:C3
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0197488C716D2A0D0F8E02F6D8F8C74E0AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 033A
Signing time: Sat 07 Jun 2025 04:00:52 +0000
Manifest this update: Sat 07 Jun 2025 04:00:52 +0000
Manifest next update: Sun 08 Jun 2025 04:00:52 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: vJuQycjl70cd2AaZUw9EItPaiM6Zzn+y+LU7VCjifNU=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:71:6d:2a:0d:0f:8e:02:f6:d8:f8:c7:4e:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Jun 7 04:00:52 2025 GMT
Not After : Jun 8 04:00:52 2025 GMT
Subject: CN=d32e9dce22cea08b8f29d0e166189cfb1ed40cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:82:13:d0:94:6b:24:ce:45:56:af:f6:c8:
ad:f9:90:b3:89:88:48:21:07:2b:fc:9a:6d:14:4c:
26:e8:e8:51:41:3b:96:c2:e2:a9:af:ab:95:b0:07:
83:26:4d:e4:9e:2f:8e:30:3a:ec:63:bb:54:28:92:
4b:18:97:9b:bd:2b:d3:e1:86:87:3b:1d:4e:d4:db:
1b:ee:9c:69:fd:e6:fc:23:c8:be:f3:b0:95:8e:5b:
bc:bc:85:27:13:64:66:09:36:83:c4:19:fb:26:36:
be:a6:3d:4e:36:ec:b3:ce:30:0e:20:9c:25:84:2b:
5f:ce:e9:8b:8e:c2:b4:91:a4:f4:86:9d:3f:84:60:
7d:57:c9:0b:9d:0e:06:37:9f:21:cb:7a:1c:84:20:
e2:b5:e7:da:95:6a:b6:82:3c:77:d2:fb:2a:16:57:
93:c9:8d:fa:b9:73:22:74:db:38:f5:b7:b4:42:41:
ef:86:a1:e7:2c:0b:83:a4:b9:a7:cd:b8:0c:78:c4:
6a:60:cf:69:87:b1:bb:37:03:64:ba:35:76:8a:a8:
75:ff:02:48:fe:7f:fa:74:5c:d9:38:f7:51:3f:b4:
ed:69:76:ef:79:c0:48:91:12:c1:70:ca:bc:b7:6f:
04:df:7f:1d:76:3f:33:8f:6c:34:c7:8c:13:86:ce:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:9D:CE:22:CE:A0:8B:8F:29:D0:E1:66:18:9C:FB:1E:D4:0C:C3
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:01:6a:0c:cf:a5:ae:6d:53:69:23:da:f5:31:56:cc:b1:
df:80:df:79:23:a1:84:d2:16:11:b1:e5:d5:25:c0:4e:b5:10:
51:aa:a7:ab:4f:4a:2a:59:31:83:a8:43:34:37:28:c2:25:01:
ac:d6:c2:7f:cf:05:81:d5:7b:88:c8:5b:8b:20:d1:25:ea:b8:
25:8c:fa:4e:77:b7:f3:19:50:4d:13:9b:ae:c9:ba:65:4c:8b:
78:7a:46:bf:9e:e9:8b:f0:1a:8d:f2:f9:86:54:83:c8:25:8f:
b5:7f:f6:ef:43:0b:6c:f8:d2:a1:43:e1:96:34:a2:26:fc:00:
ee:46:bc:a7:02:bd:fc:ba:8e:a2:6e:3c:6f:d2:77:5f:6e:3b:
0b:d1:38:fd:62:55:51:c0:70:2b:69:3b:fa:08:2d:30:4b:9e:
5b:30:09:02:c1:2e:95:e2:f7:4a:ec:b6:47:34:0a:db:8b:28:
95:eb:c6:b0:e9:32:df:94:b3:ef:25:a7:4f:49:9f:17:aa:ef:
d4:c7:de:b6:1e:6b:6a:88:9c:2f:52:01:95:81:f9:bf:54:3a:
cd:31:78:5e:bb:de:5a:65:00:a6:3f:68:e7:83:e3:86:7e:74:
2f:41:a9:9d:37:59:40:8c:f2:bb:0f:3a:a0:e4:cd:75:65:ac:
ac:76:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:20 2025 by rpki-client