Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier: YGiirp/wIa0LlnewaOXMDoqsBMRMoPStj3fLK9Af6DI=
Subject key identifier: D1:2F:3A:0E:06:D3:68:56:E0:86:10:A7:1D:37:71:6B:0D:62:70:8D
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 01975DCBAF7AE04787E4BB1B7AC972065443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number: 1076
Signing time: Wed 11 Jun 2025 07:01:59 +0000
Manifest this update: Wed 11 Jun 2025 07:01:59 +0000
Manifest next update: Thu 12 Jun 2025 07:01:59 +0000
Files and hashes: 1: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: O9tbqyPtV9fboCw1da68F1bfMAcpyOyUqz639nKvo/Q=)
2: v8jGZZ2sPrkxPTZ3eZtK4NYbA6E.roa (hash: 0l4hT05AEA8nsr6nY5F6IkEiZ/ck5kp606jyOTBkkrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:af:7a:e0:47:87:e4:bb:1b:7a:c9:72:06:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Jun 11 07:01:59 2025 GMT
Not After : Jun 12 07:01:59 2025 GMT
Subject: CN=d12f3a0e06d36856e08610a71d37716b0d62708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:ca:a5:0d:68:73:2b:88:77:76:30:c1:2d:
51:68:10:2d:ac:48:27:96:56:17:5a:5b:dd:4a:89:
58:22:b2:f1:b5:36:43:4d:6c:7f:4b:f6:ba:20:43:
a2:6f:ad:36:24:da:4f:8e:0c:41:c9:5f:15:85:03:
8d:a5:56:5b:53:ff:7e:c9:f4:46:33:63:57:e0:ee:
30:49:c1:71:22:3a:ce:39:40:17:04:08:8c:82:71:
44:dc:d3:17:0b:f2:f8:91:76:ee:2a:0b:26:f6:39:
4d:f0:6b:ae:a7:ac:19:39:5c:57:d5:15:2e:fa:ad:
d4:eb:71:97:4a:61:d7:db:ee:a2:5c:74:b6:7f:f3:
76:22:cd:9c:4d:6f:8c:ee:1a:4e:13:1b:c9:97:50:
1f:ec:dc:d0:7d:8d:0d:67:85:7f:71:71:88:b4:19:
88:3c:11:c0:3d:87:a0:b3:e7:90:c6:f2:01:28:2d:
6d:a9:97:f2:6d:c3:93:6f:ba:05:ed:97:59:3e:26:
8a:b7:f9:f0:47:3b:fb:ff:9f:3d:ce:5a:8c:b0:82:
51:5a:65:f6:d7:57:4f:26:59:c9:d1:0f:17:4e:ee:
f6:2f:ea:17:c8:fd:7e:fb:65:43:21:9a:68:3f:e4:
72:32:06:da:49:fe:29:9c:42:c1:bc:c7:1d:68:d5:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:3A:0E:06:D3:68:56:E0:86:10:A7:1D:37:71:6B:0D:62:70:8D
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d1:50:2f:75:96:5c:ff:68:d5:d8:ed:54:7b:a8:f3:7e:f5:
f4:bc:13:8e:7f:b0:de:e8:c6:48:fd:ed:d0:92:15:5b:b4:39:
25:b4:07:0d:de:73:cf:b8:c1:21:1f:ac:58:d1:e6:ff:19:48:
51:f0:e7:99:8c:cc:79:31:0c:83:a3:e6:2d:e1:03:1e:5f:34:
47:66:13:d4:17:f5:d0:83:21:2f:0d:47:83:fa:87:5d:9c:e2:
90:64:1c:01:18:86:9f:41:3e:c5:0a:73:a5:12:59:dc:0c:bd:
a5:8f:22:1b:58:c5:0b:71:83:d2:9c:7c:30:d7:45:d9:c2:1d:
9a:1a:d3:a7:f5:98:93:cd:9e:9f:04:dc:76:04:a8:57:95:4d:
25:7f:f6:2d:d9:3f:96:a9:9e:41:28:ea:e5:d2:e4:95:8f:43:
14:d9:97:da:f3:de:bc:20:15:32:e9:e1:06:e4:74:48:c5:40:
42:3a:b0:32:55:e9:6a:e9:5d:f4:cb:7c:5a:84:65:54:43:af:
ee:47:cd:d9:27:0d:b4:11:d7:56:d6:ca:5a:48:ab:a2:1e:4f:
f9:2c:a5:e8:61:78:9a:75:29:6b:52:94:8d:19:92:46:96:51:
22:d9:74:ad:fa:63:35:6f:1a:6b:5e:a0:27:ff:04:b8:92:71:
48:84:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:34:08 2025 by rpki-client