Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: kGJWDfy7NX9b9nrHCCiVKOj60OvRjeHHvN2uumsdUE8=
Subject key identifier: 2E:6D:37:EB:D9:5B:C7:49:E4:8C:FA:80:9E:9B:1C:AA:C2:5A:0C:8D
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019752D922ED4634873D32D7EB5DD5199E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1592
Signing time: Mon 09 Jun 2025 04:00:51 +0000
Manifest this update: Mon 09 Jun 2025 04:00:51 +0000
Manifest next update: Tue 10 Jun 2025 04:00:51 +0000
Files and hashes: 1: 1F9MijuQpgadBC0qomGmUYJZ8Qo.roa (hash: +dDzScNaK5jHBDGWnNSKAKH4zr9szjlmXCKJdH9h2oE=)
2: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
3: bDiIn-_UXIGuw3Qo4clxFIKAqAE.roa (hash: rYwZ+l52WfQynuoiZucorfpRFkeDzJfCrE/NRMJMIic=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: oyJ5ePI9pAuekpJ6E9H4SEiDOWAIE7+dYUwHU4GQmr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:22:ed:46:34:87:3d:32:d7:eb:5d:d5:19:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jun 9 04:00:51 2025 GMT
Not After : Jun 10 04:00:51 2025 GMT
Subject: CN=2e6d37ebd95bc749e48cfa809e9b1caac25a0c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:62:15:1d:1b:da:64:6a:7d:39:2b:9c:e2:
aa:a7:02:fb:1f:7c:5c:5d:29:56:09:2c:6c:b2:b9:
ac:3d:f8:fb:a7:f9:d1:fe:11:2d:ae:37:1e:9a:4e:
b2:f2:5f:9e:b6:38:1d:83:97:41:f7:1c:51:d9:20:
c4:67:20:2d:4e:f7:8c:74:e5:80:cf:fc:30:06:07:
25:86:27:d7:13:f5:0c:d0:35:f3:c9:ab:61:97:c6:
7f:65:03:3e:af:b1:34:db:85:58:3d:7c:c5:69:de:
e4:e6:11:e8:d4:cc:26:95:56:49:5e:4a:32:77:2a:
7f:5f:74:42:fb:c0:59:50:57:f2:01:3e:b1:e2:24:
23:d8:46:8e:2f:39:72:17:5a:3b:94:bc:b6:5b:6e:
01:d4:57:e9:cd:b4:72:f4:d7:fa:20:5d:88:40:ba:
58:46:96:49:90:2e:6d:e0:a0:1c:7c:78:cc:65:b3:
65:74:5b:1a:8c:c6:f8:bd:15:ad:bc:66:04:95:85:
5b:bf:b4:9d:c2:d8:fd:fa:75:6a:06:03:09:8b:3d:
a4:b9:b1:e5:e0:ed:c3:e4:0e:2d:8d:27:ad:6b:a1:
50:b2:fb:02:25:2f:15:e4:f1:8d:43:6b:04:1d:ff:
b1:d5:0e:e9:15:3a:15:1b:59:77:be:95:0c:0c:33:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:37:EB:D9:5B:C7:49:E4:8C:FA:80:9E:9B:1C:AA:C2:5A:0C:8D
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:66:c6:35:fa:0f:da:4b:a3:77:2b:3b:82:71:85:f6:fc:22:
c0:bb:3b:14:29:8f:ce:42:a7:ea:a6:b0:95:b9:7e:d6:fa:27:
4f:ef:88:1e:53:ee:30:41:ab:ec:0d:d7:43:97:1e:19:50:25:
fb:db:3b:7f:e5:44:f0:8a:94:68:5e:e1:ac:b7:c5:18:89:fa:
2c:0d:12:4f:c7:53:1c:44:05:64:e5:47:fb:80:13:24:e2:14:
13:0b:88:3b:c8:55:24:c6:35:34:a9:0e:5b:7e:08:29:96:c1:
7c:f5:0d:f2:d4:c5:2e:77:25:a3:c9:a3:a3:6a:1f:48:65:35:
81:5c:aa:05:5d:bd:30:07:51:65:05:c7:04:7c:75:f5:bb:6a:
d0:00:83:52:b9:58:fe:c4:eb:dc:d3:e3:f4:7b:94:be:15:f8:
e2:f4:d1:bf:d6:28:e4:8f:61:11:99:58:d8:fa:20:35:d5:33:
62:92:c2:dc:2e:12:63:b1:3d:c4:9f:b0:a4:6c:8d:18:c3:63:
49:0a:21:45:10:59:98:b3:07:2a:d6:2c:34:23:2f:8b:e0:28:
6d:f5:82:c8:f0:fb:12:b8:cd:e3:99:17:22:fd:ce:d5:c5:65:
0a:11:81:0b:ee:c2:87:5e:5e:de:d2:1c:4c:cd:19:ba:0f:01:
5b:2a:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:15 2025 by rpki-client