Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: bTimxeeWPx78+lTA6gRdKKTZmuBxckGCpAid/dFOzrk=
Subject key identifier: 52:5A:95:D9:D5:23:1D:00:97:49:4C:B6:8D:0C:C8:9C:B8:22:CC:02
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01976282B006228426E4FCA738FF008B3F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 05:00:21 +0000
Manifest this update: Thu 12 Jun 2025 05:00:21 +0000
Manifest next update: Fri 13 Jun 2025 05:00:21 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: ni9ziQcTebeFvwAJTMY22ef04GWzc7z18f1w7ckSvek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:b0:06:22:84:26:e4:fc:a7:38:ff:00:8b:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jun 12 05:00:21 2025 GMT
Not After : Jun 13 05:00:21 2025 GMT
Subject: CN=525a95d9d5231d0097494cb68d0cc89cb822cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:4d:1b:8f:34:ba:98:39:09:25:5d:f6:a7:
08:2f:a4:d3:ec:2a:87:1d:32:57:f4:a0:88:c0:6f:
31:e2:09:90:92:41:78:f6:4e:3d:9a:3c:18:52:89:
9f:d7:1f:53:7a:24:70:8a:ac:4b:a9:f7:7f:34:73:
db:f2:75:f9:be:cf:05:9f:12:49:34:c5:f2:50:9a:
22:d9:7a:87:7f:85:cf:1c:3e:a4:1f:71:9f:c8:16:
48:f6:3f:7f:96:2a:96:2a:06:e4:cd:9b:a5:5f:0c:
04:3f:26:bb:5f:c6:b1:a3:7e:7f:cd:c6:c1:31:32:
b4:ba:1e:b2:6c:9f:87:15:a1:55:00:dc:77:8f:07:
55:5b:9a:27:b5:21:f7:40:b6:df:77:70:db:6a:6a:
bb:52:18:7f:0b:33:30:fe:80:5d:50:1c:69:f9:8e:
d6:93:19:be:09:fa:23:5b:15:6a:a9:9a:45:e0:8a:
5c:fd:ba:79:d9:74:9d:ce:50:a3:1f:e9:ec:77:ce:
3f:f2:92:02:4f:82:30:23:59:f9:62:47:20:24:3b:
21:3d:5d:29:eb:d5:34:85:b9:d3:fe:8b:d8:85:7d:
0b:39:e9:38:9a:ea:32:c2:07:44:8f:60:97:82:f4:
6d:af:03:d9:bb:01:03:05:ec:6c:bf:af:ae:66:a3:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:95:D9:D5:23:1D:00:97:49:4C:B6:8D:0C:C8:9C:B8:22:CC:02
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a9:56:d5:60:46:0b:05:a6:1b:29:ce:a2:81:66:30:61:5c:
ce:d9:4e:8e:42:cb:33:65:d8:2d:53:df:db:ca:c6:99:4d:69:
fb:10:ad:7f:25:8b:dd:2d:62:fe:f6:49:e7:50:56:8d:ed:48:
a5:b1:bc:05:6d:a1:49:9c:47:09:6b:51:01:6d:ed:0e:ce:1f:
d6:9f:22:ca:9a:f0:2c:e8:4f:41:fa:16:78:9c:72:38:f7:5c:
e6:b8:66:e2:1b:22:08:03:46:14:41:4f:3d:1c:2f:19:6c:c3:
49:6c:8a:f0:e3:2c:0a:4f:ed:31:d2:c9:1a:1f:5f:47:9c:d0:
b3:c3:d3:fe:5d:6e:9c:e4:d9:97:ea:2c:00:b4:4f:3b:1a:93:
32:82:b0:ba:42:47:4e:e8:52:ab:58:c2:77:86:23:42:f4:29:
03:20:2f:da:af:c2:b0:c4:7e:7e:ed:36:ee:01:ac:07:31:28:
e1:f1:13:0a:4b:f3:a8:74:dc:ea:5c:75:01:f2:c7:b2:bc:8e:
f9:11:4b:e8:af:0f:06:c6:75:e6:cc:27:ab:fb:0c:e7:3d:66:
c0:cd:75:5d:74:5c:f2:95:4a:72:d5:3c:34:4d:cb:4c:95:1a:
fd:e8:11:c5:dd:ad:01:e1:bd:dc:b1:21:72:39:95:3c:b6:3d:
f9:5d:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:06 2025 by rpki-client