Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: R8Z3dMK/9IHuQlagUi+IMm85vL3UDQ2qIVTjk5GcbH8=
Subject key identifier: F9:B6:79:29:0B:EB:0B:5B:C9:CF:E9:7F:39:C5:8D:43:35:F9:3D:4D
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 01976CCFF6895805E0DADD8C5E806813DD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 041A
Signing time: Sat 14 Jun 2025 05:00:57 +0000
Manifest this update: Sat 14 Jun 2025 05:00:57 +0000
Manifest next update: Sun 15 Jun 2025 05:00:57 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: RxRm/7PnKEoaydYbbKhnbwuFT4ueHzw8kDtavN8xzpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:f6:89:58:05:e0:da:dd:8c:5e:80:68:13:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jun 14 05:00:57 2025 GMT
Not After : Jun 15 05:00:57 2025 GMT
Subject: CN=f9b679290beb0b5bc9cfe97f39c58d4335f93d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:7f:2f:e0:36:b4:0f:58:72:84:2b:93:f9:
12:ad:d5:7d:65:22:67:d1:c4:16:11:bc:cb:7b:8f:
b3:61:db:0c:a9:6d:f5:67:12:f5:f6:43:d3:22:64:
97:77:c8:6e:38:2c:91:a0:45:5a:c1:5d:e6:5c:11:
36:4c:90:25:59:c4:53:23:04:15:b7:46:3d:85:1a:
dc:6b:90:3e:82:52:a3:29:73:5d:4a:62:b0:29:23:
42:be:54:97:84:8b:df:44:32:b9:42:23:d2:27:50:
8f:59:a1:b3:f8:54:96:57:69:df:ed:06:7a:1b:2f:
d6:3b:00:eb:93:49:1c:b0:2b:58:7a:6b:44:b5:f7:
cc:d6:09:4e:ad:a0:e7:85:9b:b4:01:92:bd:87:f0:
aa:3a:b7:86:a1:4e:fd:59:cb:af:18:3f:ea:45:e0:
a6:64:09:d7:41:6b:65:59:3b:fe:b9:5c:e0:76:d3:
da:ba:b6:de:7a:84:85:fd:93:45:37:2f:64:d8:28:
d5:9e:50:4d:4d:fd:44:95:93:f4:5b:2c:6b:88:d8:
bb:25:28:1c:f8:d9:b0:ad:37:aa:f3:ed:ee:a2:fc:
90:52:39:6c:f1:22:2d:b6:33:47:d4:94:41:62:4c:
b7:fd:7c:22:37:68:7d:67:cf:43:ec:06:60:0f:cc:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:79:29:0B:EB:0B:5B:C9:CF:E9:7F:39:C5:8D:43:35:F9:3D:4D
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:8b:88:fe:a4:95:e1:ab:3d:e8:d9:bc:9a:96:6f:f4:eb:
b7:20:aa:d8:61:a3:ac:55:82:a2:4a:7a:1c:bf:66:cd:4f:00:
1d:23:93:4f:f9:52:b2:09:fb:09:cf:4e:8f:74:75:07:19:d5:
b9:cf:6a:3d:a8:1f:1d:e5:11:9d:f0:47:d7:cd:e6:92:1e:9d:
40:a5:0c:28:af:22:6c:17:6f:76:29:dc:c0:2c:df:2b:e3:4f:
28:39:49:2f:1f:b3:85:f3:de:82:4f:0f:e5:41:cf:d3:c8:55:
c5:fc:65:f0:d0:57:3a:54:72:12:ef:a0:c6:b5:3a:4b:4a:cb:
48:74:18:d0:b9:81:63:65:3f:11:4e:de:2c:f6:ca:bb:1c:65:
d1:fc:d6:d2:9f:f1:bb:72:21:d1:8c:68:f4:8a:b4:3a:36:b4:
6d:0e:4d:d5:e7:f4:0a:c9:ba:cb:fe:9c:79:4e:d3:69:14:a4:
d4:92:12:5a:c5:03:71:fe:bd:74:6c:e9:0c:8d:20:d1:f5:b9:
9f:e3:70:b7:20:b9:88:3f:fc:0c:eb:42:ab:bc:e4:72:ab:74:
cf:7f:91:c3:19:18:d1:24:ed:4e:14:00:71:e8:ab:66:43:37:
83:40:b3:06:98:d5:69:59:e0:8d:44:7c:e4:44:e4:87:43:cb:
86:b3:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:00:26 2025 by rpki-client