Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: buCQz4rQLqckFoXIgqHtn2lEfKerJa0kd8DiMxlOuDA=
Subject key identifier: B3:09:DC:F9:1C:FF:D7:2E:EE:E9:D6:8D:2E:0B:81:6A:42:65:BF:D3
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019758DB892C54AF4E9F242AE80062A7D319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 08:01:11 +0000
Manifest this update: Tue 10 Jun 2025 08:01:11 +0000
Manifest next update: Wed 11 Jun 2025 08:01:11 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: WLEhejUyrw0v/m7fX673rj675wvtEO0mn0MxBVljgNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:89:2c:54:af:4e:9f:24:2a:e8:00:62:a7:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jun 10 08:01:11 2025 GMT
Not After : Jun 11 08:01:11 2025 GMT
Subject: CN=b309dcf91cffd72eeee9d68d2e0b816a4265bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:2f:70:62:87:1e:27:53:c1:9f:29:99:66:
75:44:e3:10:ca:aa:ca:65:58:c7:e6:aa:e9:d9:8e:
75:81:81:00:68:88:e0:27:f0:0d:9b:41:5f:61:07:
28:cf:a4:6b:e0:61:ec:75:9f:89:bb:4a:02:5c:65:
79:81:16:42:fb:a1:8d:2d:83:c8:f2:fe:56:7a:92:
5e:fd:e0:77:f7:3d:a6:b4:9f:fd:b3:e3:09:0e:2a:
81:c0:f1:ab:ec:43:13:ba:09:51:f0:f3:75:1c:8c:
79:f0:39:53:d2:1d:9b:b7:0e:09:c6:78:85:c1:ed:
ee:c7:aa:3d:bf:2f:1e:59:bd:29:bd:e6:6f:94:bc:
e9:fd:66:c2:75:5a:a1:2b:8d:09:7a:3c:25:d1:8b:
47:92:0c:34:9a:e5:6a:ab:40:60:a2:d8:7d:2e:45:
46:63:69:1e:82:ce:01:7d:e4:f2:13:02:2c:f7:10:
aa:e2:7d:bc:6c:59:5a:49:b2:df:74:43:9c:bf:07:
28:56:12:4b:21:77:15:56:5f:7b:0d:c7:d0:83:28:
a5:e8:ee:a1:0f:09:1f:87:5e:2b:d1:e9:f8:cb:5c:
0a:4a:98:21:9d:8d:2a:ff:59:44:3c:92:c0:70:22:
a5:ed:10:9d:fc:f0:28:32:f0:32:14:dd:f0:92:f4:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:DC:F9:1C:FF:D7:2E:EE:E9:D6:8D:2E:0B:81:6A:42:65:BF:D3
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8b:f8:ab:6e:57:8e:7c:ba:d6:00:34:9b:ff:04:a1:31:33:
cb:e6:c4:0b:a9:7f:74:fb:12:6d:20:fe:7f:53:ad:bb:9e:80:
d5:c3:df:b3:41:26:12:be:8f:f8:fa:1c:fd:c9:b1:be:22:52:
8a:19:5c:90:3f:bc:87:fd:5f:3b:5d:68:25:07:9d:0f:96:56:
16:f7:d6:35:e3:e4:66:d8:ba:c2:ba:f2:bc:4c:23:db:4e:b2:
6d:07:ea:bf:38:76:38:c4:e7:35:b1:9a:d0:11:aa:45:88:39:
93:3a:67:69:1e:63:d8:8c:68:75:93:41:c0:ea:be:1b:37:63:
f5:89:58:7d:e4:dd:fc:21:89:f8:25:f7:86:80:a2:71:f5:6e:
96:03:ac:64:93:4d:b6:f6:16:d7:6d:04:b3:96:0c:10:00:6a:
7f:7a:f7:cc:2c:03:3c:bc:55:83:68:da:3a:fb:e8:c6:1f:e6:
d7:f2:9d:54:f5:d4:1b:52:e8:8a:ab:65:5f:b1:11:af:8d:d5:
26:66:0f:1c:84:31:39:ac:52:17:56:74:78:a0:15:9e:56:e6:
d0:43:7f:b3:fe:f9:e6:50:c1:71:9d:16:4f:ae:9b:d9:69:52:
c4:78:b3:00:0a:93:28:56:38:09:d1:55:13:af:07:31:b9:f3:
10:42:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:25:12 2025 by rpki-client