Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: PShugqWEVf/Rm0N42afiCd5mwBA7YqxcpBrPJGjzTYI=
Subject key identifier: F0:D7:01:0C:AF:2A:C1:6D:01:DE:46:FC:C8:AE:88:32:BF:64:AE:92
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 01974931601ECE8CBFB88ED45C95625EA62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0B6A
Signing time: Sat 07 Jun 2025 07:01:01 +0000
Manifest this update: Sat 07 Jun 2025 07:01:01 +0000
Manifest next update: Sun 08 Jun 2025 07:01:01 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: J8TfKXTPIDyTujLbeEJvKKsb8cK1q+ZH7Z4PuCgxIsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:60:1e:ce:8c:bf:b8:8e:d4:5c:95:62:5e:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Jun 7 07:01:01 2025 GMT
Not After : Jun 8 07:01:01 2025 GMT
Subject: CN=f0d7010caf2ac16d01de46fcc8ae8832bf64ae92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:9b:c1:43:d8:9d:d3:da:bb:45:29:04:59:
29:b5:a9:61:3e:62:28:ce:f6:06:06:8c:79:2a:bc:
32:62:2c:21:de:ea:47:68:d3:fb:6a:8d:fd:c8:ab:
7a:45:28:21:b3:3c:a6:ad:75:ee:d7:f1:54:20:72:
c6:81:38:05:66:60:03:eb:b8:02:58:0e:9f:b9:d2:
3d:f6:f5:75:68:11:e6:1a:a2:b5:dc:df:39:bf:7b:
9c:01:45:1a:7c:7a:04:30:f6:e7:24:d0:2a:3f:28:
69:b2:1e:f5:db:c4:fb:1e:6f:68:3c:4c:04:8d:3d:
62:c8:99:9d:82:f4:da:cf:e8:68:e1:6f:2e:a9:c3:
02:eb:29:b4:e9:04:26:72:5e:01:6d:02:b2:0f:0d:
4d:da:e5:95:2f:b5:b5:f3:39:8e:28:79:af:c4:d3:
3f:16:b7:96:27:b3:a9:94:ad:0c:ad:41:fe:a7:d8:
92:96:7a:86:8a:b4:2f:32:b4:c4:69:4f:9c:e2:08:
90:bd:bf:cf:83:ee:c1:df:01:4f:66:0c:59:c7:28:
30:b8:d0:9c:7a:cc:4d:22:89:25:eb:7a:b0:d5:cf:
78:2d:99:89:fd:65:73:f3:3d:30:f0:e1:29:36:be:
76:34:fe:b9:61:e6:7b:60:b3:7d:32:39:26:16:29:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:01:0C:AF:2A:C1:6D:01:DE:46:FC:C8:AE:88:32:BF:64:AE:92
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:81:86:d4:22:c8:c7:11:58:da:9d:3d:89:db:69:d9:43:63:
c4:ea:52:43:67:88:b6:95:50:bc:22:d4:ab:96:ef:b8:34:a5:
cd:da:d1:50:28:a3:db:2f:4c:53:b4:e8:c5:41:55:6b:d0:c6:
ad:00:e2:e0:e8:0e:b4:88:83:6a:da:07:c8:59:eb:cc:96:a8:
7d:c1:77:33:da:c3:de:91:2a:53:c3:e7:c1:d9:13:27:dc:80:
d7:c1:a1:9f:f5:29:c5:ff:ea:83:6e:d3:3b:5b:f1:a1:9e:08:
29:32:65:be:c4:01:45:0d:0b:6e:c5:50:72:96:8b:b1:3e:c1:
19:bf:d5:f7:b1:88:54:fb:0e:11:e8:8f:08:b0:04:f0:4e:da:
69:a7:4c:9f:1f:a3:b5:db:9a:f2:72:f2:8b:91:bf:bf:57:7e:
12:8e:32:60:ff:ff:23:9d:99:22:2b:b6:9b:5b:57:a9:93:89:
9e:57:5a:81:6c:58:ac:f4:51:31:84:76:32:cc:8d:7f:c1:56:
ef:1f:e7:fc:c7:e3:e0:04:50:52:23:d1:55:1a:a5:b1:8e:8a:
d2:bf:4f:31:6e:a5:40:ae:ec:05:27:14:76:f0:30:a7:c7:a0:
25:5f:41:04:88:eb:32:7b:e5:6b:a7:3b:2f:d2:fb:7c:9b:35:
75:aa:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:57:07 2025 by rpki-client