Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: kSBKdIcnVVScEqMt85EE67PGpETCnir6Nhdj126Wi0Q=
Subject key identifier: DB:69:0C:4F:2E:9B:FC:16:3E:FD:3F:DD:1A:D3:85:C2:99:01:09:BA
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 01974D45206A8E8765CC5447BFA6428C0514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0592
Signing time: Sun 08 Jun 2025 02:01:04 +0000
Manifest this update: Sun 08 Jun 2025 02:01:04 +0000
Manifest next update: Mon 09 Jun 2025 02:01:04 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: 9fw5lo8hD96zTL/+8UuuFb9dnJdWb8UL0PcGjJs4NGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:20:6a:8e:87:65:cc:54:47:bf:a6:42:8c:05:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Jun 8 02:01:04 2025 GMT
Not After : Jun 9 02:01:04 2025 GMT
Subject: CN=db690c4f2e9bfc163efd3fdd1ad385c2990109ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:ff:d4:40:30:29:c9:39:b4:67:82:74:4b:
2b:c0:e2:1a:6b:29:37:6c:a8:fe:49:b7:3f:e7:2a:
19:92:fd:3b:cd:4b:ab:00:46:91:e4:6d:49:b3:71:
57:b4:99:71:ec:3f:18:d1:1e:5c:25:88:10:ac:e3:
ca:41:68:fc:20:05:d4:26:32:d2:7f:fc:84:83:ff:
db:47:7a:8a:e6:62:e7:73:54:39:be:2d:f5:76:ed:
08:69:2b:8d:ce:c8:66:3f:26:61:de:d3:66:90:d6:
0a:58:5e:b8:a5:36:89:84:c2:4b:b2:cb:93:ea:91:
7c:10:46:72:88:b4:25:b1:9c:bc:df:cf:ce:b9:c4:
53:fe:da:97:83:cd:41:da:34:9e:87:83:70:0a:f0:
96:42:7e:4d:b3:60:a3:2f:db:97:0b:94:1c:6e:84:
c3:0f:f7:31:f7:38:59:ad:50:d9:f2:9c:9e:63:4e:
1f:c8:17:87:b1:f3:14:b5:6c:e3:a1:57:c5:08:c2:
b3:c1:5d:39:cf:9e:c5:35:2d:c7:54:3b:74:a5:a2:
a4:00:4e:d0:1c:55:de:96:78:e0:fe:36:e9:37:40:
09:b7:51:65:12:e3:f4:b5:e1:27:33:f0:1b:24:22:
a5:2e:38:66:0c:86:7b:83:0b:7f:c6:e0:41:31:57:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:0C:4F:2E:9B:FC:16:3E:FD:3F:DD:1A:D3:85:C2:99:01:09:BA
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:a1:65:e9:87:b0:72:42:62:90:93:30:cf:d5:d4:3d:73:
d7:23:16:0c:cc:6d:f5:0a:1c:c2:ed:fd:8d:ec:1c:03:48:f7:
80:1c:61:06:34:2c:51:02:d3:e9:8d:5b:98:99:af:bb:63:85:
74:ef:b0:02:15:b5:08:89:07:90:d9:5e:04:a5:e2:0d:fa:ca:
be:69:9a:a4:89:3b:7a:ad:fd:97:d1:d4:a1:7b:d5:72:2a:be:
21:17:72:60:bb:82:0e:70:32:93:3e:69:20:f7:13:18:9b:d5:
ee:6d:aa:1a:71:11:87:41:9f:05:36:dc:b4:ad:dd:26:c6:60:
51:2b:7c:60:1c:44:62:73:83:7a:b1:ff:31:6e:5d:7b:68:de:
33:52:f8:86:56:b7:7a:10:7b:6c:d7:be:31:0e:8b:78:86:73:
db:cf:0c:a6:cd:96:96:32:a5:ab:d1:8f:98:7b:8d:04:22:4d:
9e:14:eb:b6:ce:6b:da:a2:9a:fb:0e:37:38:e6:b6:f3:10:c9:
98:42:d0:db:b3:62:bb:8f:c2:6e:4e:de:fb:05:b5:7e:02:36:
b9:8d:5d:78:64:d7:da:3c:64:8f:67:5a:08:b3:9b:52:09:75:
d7:51:bc:36:67:15:38:38:0c:41:0e:f1:5b:db:7e:4a:e8:04:
1c:b0:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:06 2025 by rpki-client