Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: c6bKCHfzJ31Gk73T+815JqeAunBLeplCKAtuYJbsJAk=
Subject key identifier: 15:43:95:B5:A1:5C:AB:78:1A:6B:EF:1B:52:89:D6:8A:0B:CC:73:D0
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019753B4CEA7B1BC7CDE5AF91CC20B920F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 040D
Signing time: Mon 09 Jun 2025 08:00:47 +0000
Manifest this update: Mon 09 Jun 2025 08:00:47 +0000
Manifest next update: Tue 10 Jun 2025 08:00:47 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: R6QhDL4yJjozC66PUcayou3kMQuzdm7j44/oI95tWZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:ce:a7:b1:bc:7c:de:5a:f9:1c:c2:0b:92:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jun 9 08:00:47 2025 GMT
Not After : Jun 10 08:00:47 2025 GMT
Subject: CN=154395b5a15cab781a6bef1b5289d68a0bcc73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a7:d8:a4:a6:4e:a4:82:08:bd:ef:36:a1:17:
0b:35:e9:b1:2b:61:c3:7c:62:0e:9b:42:d3:ed:53:
65:77:af:5b:85:51:35:53:40:8c:70:34:25:b2:ec:
3a:0b:7e:96:85:a3:1a:fe:e3:62:00:57:64:13:85:
98:81:6f:39:c2:d8:20:a3:8c:d1:6d:c1:2d:e6:b3:
e5:3f:9f:7a:75:32:c8:1d:ff:5d:2d:1e:15:f4:82:
67:26:e3:6c:f4:c4:d9:32:1f:b6:6d:ef:18:62:a2:
38:94:d6:3d:68:70:46:da:99:49:9b:ef:1e:20:48:
c4:dd:b3:2d:21:cc:e6:0f:d6:c2:5c:a6:cc:b0:22:
67:5a:d8:24:bb:bc:1e:a1:63:ea:96:f7:e5:e1:00:
42:0c:c4:b2:ba:67:ec:ed:0f:ad:17:f7:94:bf:49:
1f:4a:6d:8a:fd:50:13:92:d5:e9:c5:f5:71:c2:31:
10:2b:41:b1:21:78:09:7f:c7:1c:30:41:75:84:e4:
ff:00:cf:ab:c1:42:14:0f:5a:b6:35:0d:44:8a:db:
b6:b4:9e:4d:dd:34:e0:fa:4a:dc:e0:86:b0:f4:21:
74:ac:20:9d:4b:08:73:b5:77:45:97:ab:1b:42:09:
fc:9b:13:51:a9:26:bd:fd:83:6d:df:ca:e0:1b:8d:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:95:B5:A1:5C:AB:78:1A:6B:EF:1B:52:89:D6:8A:0B:CC:73:D0
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:2a:58:ae:71:6e:91:62:23:7d:ba:b8:d8:86:cf:d8:e4:
de:96:e8:d7:5e:2f:74:12:ee:98:c7:0f:b2:90:e3:df:48:41:
37:77:1d:f2:53:2d:e8:7f:97:2e:de:39:9b:07:87:30:58:2a:
a4:a8:70:b4:7c:2c:05:67:63:a5:4a:db:67:3f:4c:25:ac:af:
58:14:b1:29:09:16:2c:ed:e2:a6:85:cb:c1:35:5b:57:2c:b5:
1a:5a:d9:e6:1a:c8:b5:b3:a1:d7:0e:e3:d6:1f:ca:41:5c:37:
d0:b2:57:8d:c7:92:7b:79:ec:50:97:68:7e:40:84:73:18:c2:
48:bc:e3:33:d0:25:80:74:bf:eb:15:33:bd:c1:9e:51:1d:b3:
5b:e5:e3:ca:d2:77:dd:82:08:be:2e:fd:3e:ef:ea:26:d7:93:
ba:2c:b5:6f:b7:c5:91:0e:1c:58:81:50:ed:49:7f:de:8a:01:
a0:36:9e:5a:15:2f:3c:a1:26:5c:19:f1:d0:77:00:f3:ea:15:
dc:8c:65:4c:ba:ac:46:8b:01:de:1a:26:3c:64:c2:56:c6:8a:
aa:88:c2:3a:b9:ee:49:55:89:be:48:2e:23:01:fd:f1:0c:33:
38:7c:9c:f6:cb:16:cf:d6:85:eb:61:15:f2:4e:43:c5:e1:17:
a9:cd:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:46 2025 by rpki-client