Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: zZXHlaDvcrzxpWckjICTh+KT42u4D1hixZLEBxnxZ0U=
Subject key identifier: E9:39:3A:F0:15:7F:2D:C5:B5:FA:66:BB:9A:80:F5:C7:A4:F8:E7:C6
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0197469D93435E58E8299B26E6FD1DD4BF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:00:21 +0000
Manifest this update: Fri 06 Jun 2025 19:00:21 +0000
Manifest next update: Sat 07 Jun 2025 19:00:21 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: R+FD7nX78sYmx8AQ3+p90OKbTgSW/qH5MPileTwhpoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:93:43:5e:58:e8:29:9b:26:e6:fd:1d:d4:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jun 6 19:00:21 2025 GMT
Not After : Jun 7 19:00:21 2025 GMT
Subject: CN=e9393af0157f2dc5b5fa66bb9a80f5c7a4f8e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7e:8d:ec:f6:94:84:23:4e:a8:0a:bf:74:d0:
c9:a9:e5:77:b4:d6:cc:8c:5a:28:fe:21:08:89:a9:
fb:c9:2a:f5:76:f4:37:93:c1:0f:6b:dd:73:56:b4:
f0:da:6d:9c:22:04:cf:02:d8:a2:fc:db:d8:f0:e1:
49:2f:e3:49:3a:55:4c:56:db:a1:44:94:33:7b:28:
dd:02:d2:0f:66:cd:bc:f2:77:ac:3b:29:f2:e2:6a:
b9:23:37:c6:7e:73:de:97:e0:ad:7f:bd:ca:d3:1b:
86:04:fd:32:21:64:31:68:d2:1d:47:de:dc:74:72:
88:67:b7:2d:96:9c:37:41:70:86:30:35:db:b2:a2:
a1:84:f9:5c:27:8d:37:d6:b7:4a:78:03:ec:6d:6a:
df:53:2e:32:5c:c3:73:9e:76:a9:1c:7d:7b:9e:79:
ae:09:da:74:2c:25:36:a1:37:01:ca:6b:b1:8b:e8:
12:5b:23:73:36:87:28:2e:51:bd:74:d5:12:ab:2c:
f3:bd:63:66:4d:75:f5:6e:d5:f4:98:dc:47:57:87:
0c:17:27:a1:5c:48:99:3b:66:cb:c4:66:2f:0a:ad:
8f:08:ad:6b:f4:9b:50:a4:3a:b6:86:c3:ac:45:78:
7b:cb:3b:50:fe:35:b8:ff:8e:c2:50:d3:aa:bf:91:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:3A:F0:15:7F:2D:C5:B5:FA:66:BB:9A:80:F5:C7:A4:F8:E7:C6
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:1a:4b:e4:23:a6:52:66:b1:23:c9:59:53:90:de:39:b6:
5a:52:6c:dd:c9:35:fe:e9:ac:a2:08:dc:e2:f7:04:2d:a5:ae:
9d:ec:c4:f7:5d:dc:a5:35:77:1c:94:05:59:4e:a7:14:62:7b:
2a:3f:ac:d5:d2:d0:38:cc:e9:bd:06:3f:6a:a6:cd:83:c6:78:
fd:74:cc:98:c2:d5:dd:22:ee:c1:ea:eb:f2:c0:fa:f9:46:70:
39:55:e3:3d:72:61:ef:e6:71:4a:68:ac:f1:33:72:7c:a0:f0:
c2:cf:87:60:1b:62:13:57:9d:4b:5c:c2:66:43:23:e6:32:07:
2a:30:67:d6:ec:29:bd:9f:68:9c:4f:d4:a1:66:85:a7:82:1e:
72:c5:ab:be:fb:0f:93:06:1c:f4:aa:94:fa:8a:66:10:d6:3b:
3d:90:95:38:13:22:65:dc:bd:14:68:91:2f:b3:38:d7:9b:4b:
1a:0f:a3:55:f8:90:29:8e:fb:2e:59:4b:71:99:ee:a0:8b:ea:
49:7c:13:7a:ff:28:3f:89:d2:f8:94:87:ba:b9:e8:15:31:d6:
2d:2e:74:b0:c9:c3:a4:ce:50:26:de:e1:0b:d3:77:2f:b4:8b:
3e:82:45:ad:2e:c9:81:96:a6:05:23:dd:ef:5b:be:d2:52:9a:
89:5c:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:11 2025 by rpki-client