Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: ugB6OSbumNeYS4s31RW6aKuVzAAOL6XaSDWMhyZBdpw=
Subject key identifier: 41:87:63:52:82:31:BE:A3:74:55:25:A0:3A:34:FC:6C:73:73:7D:7B
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 01974930F947CDC59C9DB9CB7F21CC044A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0A36
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: u4XAzyxI4Qf3Sbd6jFAjZ95ey0Y1eK1aVOr2t2Hwjxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f9:47:cd:c5:9c:9d:b9:cb:7f:21:cc:04:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=418763528231bea3745525a03a34fc6c73737d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:2d:67:93:83:e1:e3:db:37:5b:58:8d:c0:
ac:03:b5:3c:7b:0a:73:5b:54:8d:a7:82:80:0e:6d:
8f:6a:d6:c9:72:ef:3d:a8:2e:c6:43:e5:03:6d:08:
4b:3c:ac:96:22:0a:f7:57:44:09:9b:1e:a1:ba:ef:
97:9c:fc:5b:c4:8d:ef:25:e9:90:58:34:cb:6b:5f:
25:e5:2f:29:1a:ba:2d:79:fa:ae:c6:51:b2:88:b7:
69:eb:a8:0e:b6:29:07:32:fd:2f:ed:67:16:ae:57:
58:9d:3d:49:af:63:d3:c4:1b:91:c7:92:b1:dc:5d:
42:8d:85:eb:5c:40:4e:1b:b0:c0:fb:45:f0:d4:3c:
1f:37:c8:0d:99:85:e2:1c:96:6f:04:db:c7:e5:28:
68:9f:05:99:db:19:a5:c1:c4:e6:cb:14:ab:a5:17:
47:f7:ef:bf:40:ba:db:b4:da:b0:cd:19:2b:27:3a:
9f:19:65:58:ad:8a:ef:a4:95:53:9c:cd:77:ae:b0:
55:33:39:dc:39:6e:50:c0:26:54:a1:df:78:82:32:
5a:3a:35:c2:19:55:7b:e9:da:ba:bb:0a:97:83:2b:
67:46:3a:81:33:a4:44:d0:2a:76:b2:ca:af:2c:5c:
42:f6:b0:b9:39:61:a9:bf:b6:be:17:fb:6d:0c:a1:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:63:52:82:31:BE:A3:74:55:25:A0:3A:34:FC:6C:73:73:7D:7B
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:32:64:97:ab:17:f7:7a:db:a8:6a:bd:ef:50:b3:59:c5:
f0:c6:73:bc:d7:a5:43:4e:1a:1a:c1:cb:7d:02:73:b9:90:5a:
6e:d4:08:10:96:90:02:f9:10:ed:35:53:55:f1:54:f0:b2:f4:
80:08:c7:86:8b:b6:b5:ab:0d:b9:5a:83:12:82:fa:cf:37:93:
bc:49:6d:70:ba:72:ba:56:25:78:de:c1:73:a1:ea:76:15:a4:
23:9c:68:cd:9b:77:40:42:4d:e4:7e:f7:20:63:3c:34:44:16:
8a:12:f1:52:ce:d0:5d:1d:98:a0:d6:69:10:41:45:e9:a3:2b:
56:66:2c:4b:3a:29:13:8d:13:e0:80:4e:ff:7f:ac:41:b8:00:
36:73:a8:6a:38:63:15:4e:ad:0f:69:b5:ac:52:c0:d1:a7:9c:
fa:56:49:2b:9b:7e:eb:64:ab:d5:a3:8e:46:a0:ae:dd:f6:8f:
58:ca:31:c2:0f:34:f4:56:ee:e1:31:37:f6:15:90:f7:96:44:
9d:26:fe:c7:0f:98:cc:b5:c4:a4:b6:0d:b9:69:bd:ce:c9:4d:
5b:16:ad:e0:31:66:01:99:20:1b:be:df:4b:1d:45:91:c4:db:
da:5e:89:13:d4:18:35:89:57:c6:d6:bb:73:cb:34:64:e8:05:
1d:b8:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:11 2025 by rpki-client